New Private Security Statute: Is Your Company Ready?

On September 9, 2024, Law No. 14,967/2024 was enacted in Brazil, officially establishing the Private Security and Financial Institutions Security Statute. This new legislation repeals Law No. 7,102 of 1983, which had regulated the sector until then.
The Statute was created to modernize and professionalize the private security industry, preventing the operation of unauthorized individuals and companies (“clandestine” providers).
Undoubtedly, the new legal framework brings several potential benefits, such as modernization of the sector, greater regulatory clarity, and enhanced service quality. However, companies operating in private security will need to adapt to this new reality—which will involve additional costs and bureaucratic procedures.
With the new statute, many companies become subject to greater oversight and inspection by the Federal Police. Additionally, they will be required to comply with specific formal, operational, and structural standards in order to maintain valid operating authorizations.
One of the most significant changes is the expanded definition of private security services under the law.
Among the activities now expressly classified as private security services—previously not covered under the old legal framework—are:
Security for events held in public spaces;

Security in land, waterway, and maritime public transport systems;

Security in environmental conservation units;

Monitoring of electronic security systems and tracking of cash, assets, or valuables;

Risk management in transportation operations involving cash, assets, or valuables;

Access control at ports and airports.

Companies operating in the electronic security sector (e.g., monitoring of electronic security systems) are among those most impacted by the new statute.
It is estimated that over 20,000 companies in Brazil currently provide such services. All of them will now need to comply with the new statute, including undergoing a formal authorization procedure with the Federal Police.
If your company provides any of these services—including those already previously regulated—you should stay informed and prepare for the next steps.
While the new statute will indeed bring costs and bureaucratic challenges, it also creates an opportunity for companies to get ahead of the competition and demonstrate their market readiness.
It is worth noting that companies operating in any of the services listed in the statute without complying with its requirements will be considered irregular and subject to fines and other penalties. Furthermore, they may struggle to remain competitive, as large companies are unlikely to hire non-compliant providers—especially since clients themselves may also be penalized for doing so.
Below we highlight some of the key changes and requirements introduced by the new statute for private security service providers:

Operating Authorization
All private security companies must obtain prior authorization from the Federal Police in order to operate. The Federal Police is the designated authority for monitoring and overseeing the sector nationwide.
Requests for authorization must be submitted through the Federal Police’s GESP portal—the same platform previously used for companies already regulated under the old law.
To obtain authorization, companies must go through a formal application process and meet several requirements, including proof of minimum capital, adequate physical infrastructure, a qualified minimum workforce, among others. Additionally, an on-site inspection of the company’s operational facilities is required.
Operating authorizations must be renewed every five (5) years for companies engaged in electronic monitoring services, and every two (2) years for other companies. Maintaining full compliance with the applicable requirements is essential.

Minimum Capital Requirements
The new statute updates the minimum capital thresholds required for authorization.
These minimum capital requirements vary depending on the type of service provided. For example:
R$146,000 for electronic monitoring companies;

Up to R$2,920,000 for companies involved in the transportation of cash, assets, or valuables.

If a company offers multiple services listed under Article 5 of the statute, it must meet the capital requirement of the most demanding service, and add R$146,000 for each additional service type.
Importantly, this capital must be fully subscribed and paid-in. The company must be able to prove the origin, legality, and regular incorporation of these funds, as well as demonstrate that the amount has been effectively absorbed into the company’s financial records.

Minimum Age of Shareholders
The statute requires that shareholders of companies engaged in electronic monitoring be at least 21 years old. For all other private security service providers, the minimum age is 25 years.
Additionally, shareholders must present a series of official background clearance certificates.

Employees, Vehicles, and Operational Facilities
Further regulations will be detailed in a forthcoming Regulatory Decree and a Federal Police Ordinance, which are expected to include:
Minimum staffing levels for each designated role, with proof of appropriate qualifications;

A minimum number of vehicles owned or possessed by the company;

Security and structural standards for operational facilities.

Pending Regulations and Adaptation Period
It is important to note that the new statute will be supplemented by a Regulatory Decree (currently in draft form and expected soon) and by a Federal Police Ordinance addressing procedural details.
Until these are enacted, companies are not yet fully required to comply with all provisions of the new law. The statute itself establishes a three-year adaptation period starting from its publication—meaning that several months have already passed.
Moreover, not all requirements need to be met at the time of the initial authorization request; some will be verified during the approval process.
That said, companies should not delay. Those seeking to remain competitive in the market should already be taking the necessary steps to prepare for compliance and secure their authorization.

At RUCR Law, we are closely monitoring the details of the new statute and are ready to assist your company with all compliance matters. Count on us to ensure your regularization and legal security.

By: Henrique Versiani