On May 6, 2026, Brazil’s National Institute of Metrology, Standardization and Industrial Quality (INMETRO) issued Ordinance No. 44/2026, mandating compulsory certification for Wi-Fi 7–enabled IoT gateways and edge AI boxes equipped with NPUs—particularly those supporting vision recognition and voice processing. The regulation takes effect November 1, 2026. Importers, manufacturers, and distributors supplying these devices to the Brazilian market—especially those based in China, which accounts for over 62% of such imports—must now prepare for compliance across RF compatibility, cybersecurity, and energy efficiency requirements.
On May 6, 2026, INMETRO published Ordinance No. 44/2026, formally adding two product categories to its mandatory conformity assessment scheme: (1) IoT gateways supporting Wi-Fi 7 protocol; and (2) edge AI boxes integrating neural processing units (NPUs), specifically those used for visual recognition or voice processing applications. The requirement becomes enforceable on November 1, 2026. Certification must be conducted by accredited local laboratories in Brazil, covering three technical domains: radiofrequency compatibility (per ABNT NBR 15601), cybersecurity (per ABNT ISO/IEC 27001), and energy efficiency (under PROCEL program).
Companies exporting Wi-Fi 7 gateways or edge AI boxes from China—and other manufacturing hubs—to Brazil are directly affected. Since China supplies over 62% of such imports into Brazil, exporters face immediate compliance obligations before shipment. Non-compliant products will be barred from customs clearance after November 1, 2026.
OEMs producing certified models for global brands—or contract manufacturers assembling devices for export—must verify whether their current designs meet all three test criteria. Product redesign or firmware updates may be needed to satisfy ABNT NBR 15601 (RF immunity/emission) and ABNT ISO/IEC 27001 (e.g., secure boot, update integrity, credential management).
Brazilian importers, distributors, and e-commerce platforms selling these devices must confirm certification status prior to resale. Post-November 2026, uncertified inventory may not be legally marketed or supported under warranty—posing both operational and reputational risk.
Third-party labs, certification consultants, and logistics firms offering INMETRO-related services will see increased demand for localized testing coordination, documentation review, and lab submission support—particularly for the new cybersecurity and NPU-specific validation elements.
While Ordinance No. 44/2026 is effective November 1, 2026, INMETRO may issue complementary technical notes or FAQs regarding NPU-specific evaluation criteria or Wi-Fi 7 channel/bandwidth definitions. Stakeholders should subscribe to INMETRO’s official notifications and track updates via its public portal.
Given limited lab capacity and lead times, companies should identify which SKUs are most frequently imported into Brazil—especially those already in active distribution—and initiate certification planning first. Products without existing ABNT NBR 15601 or PROCEL reports will require full retesting.
This ordinance reflects a broader regulatory shift toward performance-based, use-case-aware IoT oversight—not just radiofrequency safety. However, the cybersecurity component remains aligned with ISO/IEC 27001 (a management system standard), not device-specific frameworks like ETSI EN 303 645. Current certification does not yet mandate hardware-rooted trust anchors or formal vulnerability disclosure policies.
Accredited labs in Brazil report average turnaround times of 8–12 weeks for full tripartite certification. To meet the November 1 deadline, submissions should be finalized no later than early August 2026—requiring advance sample preparation, documentation translation, and internal technical alignment.
Observably, this update signals INMETRO’s move toward regulating IoT devices not only by transmission technology (e.g., Wi-Fi generation) but also by computational architecture (e.g., NPU integration) and functional capability (e.g., real-time vision/voice inference). Analysis shows that the inclusion of edge AI boxes—rather than general-purpose computing hardware—suggests targeted scrutiny of devices operating autonomously at network peripheries, where security and energy behavior are less centrally controllable. From an industry perspective, this is better understood as an early-stage regulatory signal rather than a fully matured framework: the cybersecurity assessment remains tied to organizational controls (ISO/IEC 27001), not device-level assurance, and no specific NPU benchmarking or AI model transparency requirements are defined yet. Continued observation is warranted for potential alignment with emerging Latin American harmonization efforts or future updates referencing IEC TR 63297 or ISO/IEC 27002:2022 Annex A.81 (AI security controls).

In summary, INMETRO’s Ordinance No. 44/2026 introduces enforceable certification for two high-growth IoT device categories entering the Brazilian market. Its significance lies less in immediate disruption and more in its indication of a maturing, functionally grounded regulatory approach to connected devices. For stakeholders, it is currently more accurate to view this as a structured preparation milestone—not a sudden compliance cliff—where proactive alignment with local testing infrastructure and phased certification planning delivers measurable advantage.
Source: INMETRO Ordinance No. 44/2026 (published May 6, 2026); official INMETRO regulatory database; publicly reported import share data from Brazilian foreign trade statistics (SECEX/MRE).
Note: Implementation details—including lab accreditation status for NPU-specific evaluations and interpretation of ‘edge AI box’ boundaries—remain subject to further clarification by INMETRO and are under ongoing observation.
Get weekly intelligence in your inbox.
No noise. No sponsored content. Pure intelligence.