Joint Resolution No. 18 — Establishes the Policy on Quality of Information Provided to the Central Bank of Brazil

Joint Resolution No. 18

JOINT RESOLUTION NO. 18, OF NOVEMBER 28, 2025

Establishes the policy on the quality of information provided within the scope of the Central Bank of Brazil's operations by financial institutions and other institutions authorized to operate by the Central Bank of Brazil.

The Central Bank of Brazil, in accordance with Art. 9 of Law No. 4.595, of December 31, 1964, makes public that its Collegiate Board, in a session held on November 17, 2025, and the National Monetary Council, in a session held on November 27, 2025, based on Arts. 4, main text , item VIII, of the aforementioned Law, 9-A and 29 of Law No. 4.728, of July 14, 1965, 20, § 1, of Law No. 4.864, of November 29 1965, 1 of Decree-Law No. 70, of November 21, 1966, 6 of Decree-Law No. 759, of August 12, 1969, 7 of Law No. 6.099, of September 12, 1974, 1, § 4, of Law No. 6.855, of November 18, 1980, combined with Arts. 7, main text , item I, of Decree-Law No. 2.291, of November 21, 1986, 1, main text , item II, of Law No. 10.194, of February 14, 2001, 1, § 2, of Provisional Measure No. 2.192-70, of August 24 2001, 6 and 7 of Law No. 11.795, of October 8, 2008, 1, § 1, and 12 of Complementary Law No. 130, of April 17, 2009, 9, main text , item II, of Law No. 12.865, of October 9, 2013, 6 and 7, main text , item III, of Law No. 14.478, of December 21, 2022, and 1 and 2 of Decree No. 11.563, of June 13 2023,

H A V E R E S O L V E D:

CHAPTER I OF THE OBJECT AND SCOPE OF APPLICATION

Art. 1. This Joint Resolution establishes the obligation to prepare and implement a policy on the quality of information provided within the scope of the Central Bank of Brazil, due to legal, regulatory, or specific demands of this Autarchy, by financial institutions and other institutions authorized to operate by the Central Bank of Brazil.

CHAPTER II OF THE POLICY ON THE QUALITY OF INFORMATION PROVIDED

Section I Of the obligation

Art. 2. The institutions mentioned in Art. 1 must implement and maintain a policy on the quality of information provided compatible with their nature, size, complexity, risk profile, and business model, in order to ensure the quality of the information provided. § 1. The information to which the main text refers includes data, quantitative and qualitative, the documents and reports sent or made available. § 2. For the purposes of this Joint Resolution, information quality is defined as the adequacy of information to the conditions established in laws, regulations, or specific demands of the Central Bank of Brazil, observing the following dimensions: I - accessibility: conditions that allow users to obtain information, including clear indication of the location of availability, the method to make any request, deadlines, and other relevant access characteristics, ensuring special treatment for people with disabilities; II - accuracy: measure in which the information provided reflects reality in a precise and reliable manner, according to the methodology used; III - adaptability: capacity to generate information in a format that meets various information demands, including those not reported periodically, as well as those deriving from regulatory changes foreseen, including in situations of adversity or crisis; IV - clarity: presentation of information in a concise manner, allowing easy comprehension and meeting the user's needs; V - comparability: capacity to enable the user to identify and understand similarities and differences between information, whether in different periods or between different geographic areas or non-geographic domains; VI - completeness: capacity for the information to fully meet the required aspects, with complete data; VII - reliability: absence of significant deviation in reviewed data relative to its initial value; VIII - consistency: measure in which information regarding the same event or fact is standardized and free of contradictions, even when generated by different sources or methods; IX - integrity: property by which it is ensured that the information is authentic and has not been modified in an unauthorized or accidental manner; X - traceability: conditions that allow tracing the information from its origin to its provision to the end user; XI - relevance: capacity to provide useful information that can influence decision-making by users; and XII - timeliness: provision of information in a timely manner, within the established deadline, observing a short interval of time between the reported facts and the date of provision of the information, so as not to compromise its usefulness to users.

Section II Of the essential characteristics

Art. 3. The policy on the quality of information provided referred to in Art. 1 must, at a minimum: I - be supported by a robust governance system, aimed at ensuring compliance with reporting requirements, including: a) identification of the duties and responsibilities of the areas involved, including senior management; and b) provision of sufficient, adequate, and specialized material and human resources; II - present a data architecture and information technology (IT) infrastructure adequate for the production and verification of information, aiming, at a minimum, to: a) ensure compliance with reporting requirements, even in adverse situations or crises; b) include instruments for prior validation, detection, and timely resolution of errors and inconsistencies from data preparation through to presentation to users; and c) use automated and integrated information management tools, information technology, and techniques; III - adequately document the stages of preparation, verification, and provision of information, including: a) general description of procedures in all their phases, including their chronological order; b) lists of areas involved in the preparation of information, in validation processes, controls, and final approval, detailing respective responsibilities; c) maintenance of a data dictionary with the description of the content, structure, and format of a database or a set of data; d) description of measures to be adopted to ensure that the dimensions and essential characteristics of the quality of information provided are met; and e) guarantee that the information is auditable, with verification trails; IV - provide mechanisms for disseminating knowledge of the information quality policy, including accountability at all levels of the process; V - provide mechanisms to validate, evaluate, and continuously monitor the quality of information provided, including: a) performance of specific quality tests, including those defined by the Central Bank of Brazil, prior to the provision of information, including reviews and reconciliations between reported data and internal systems; and b) preparation of a report, with semi-annual frequency, containing consolidated information on information quality processes, detailing any irregularities or improprieties found, including those pointed out by the Central Bank of Brazil, and the corrective measures already adopted and those in progress; VI - provide corrective measures for irregularities or improprieties identified in the monitoring referred to in item V, including: a) definition of a deadline for the adoption of measures necessary to resolve irregularities or improprieties by the directors responsible for the areas that produce and provide the information; and b) an action plan, to be submitted to the board of directors, or, if none exists, to the executive board, in the event of non-resolution of the irregularities or improprieties found within the deadline defined according to item "a"; VII - be evaluated periodically by the institution's internal audit; VIII - be submitted to periodic review, with implementation of necessary improvements; and IX - be aligned with other relevant institutional policies to ensure coherence and effectiveness in governance and information reporting processes. Sole Paragraph. The report referred to in item V, item "b", of the main text must: I - be submitted: a) to the board of directors or, if none exists, to the executive board; b) to the audit committee, if one exists; and c) to internal, independent, and cooperative audits, when applicable; and II - be sent to the Central Bank of Brazil, in the manner defined by it, when required.

CHAPTER III OF THE RESPONSIBILITY OF MANAGEMENT

Art. 4. The board of directors and the executive board must actively engage in the implementation, operation, maintenance, and improvement of the policy on the quality of information provided referred to in Art. 1, observing that:

I - it is the responsibility of the board of directors:

a) to approve and review, with a minimum annual frequency or whenever there is a modification, the policy on the quality of information provided referred to in Art. 1;

b) to establish strategic guidelines for the operation of the institution's information quality processes;

c) to provide the resources necessary to ensure the implementation and maintenance of information quality processes;

d) to ensure that the information quality processes are implemented and maintained in accordance with this regulation;

e) to ensure the timely regularization of any deficiencies detected; and

f) to promote the dissemination of an information quality culture within the institution, encouraging the adoption of ethical values, ensuring complete reporting, and preventing omissions or manipulations; and

II - it is the responsibility of the executive board:

a) to ensure compliance with the information quality dimensions established in the regulation;

b) to take the necessary measures to ensure that information quality processes are effective and meet regulatory demands; and

c) to ensure that specific tests on the quality of information provided are performed, communicating to the competent control instance any deficiencies found and monitoring their regularization.

Art. 5. The institutions mentioned in Art. 1 must designate to the Central Bank of Brazil a director responsible for compliance with the provisions of this Joint Resolution.

Sole Paragraph. The director mentioned in the main text can perform other functions in the institution, provided there is no conflict of interest.

Art. 6. For the institutions mentioned in Art. 1 that do not have a board of directors, the duties and competencies provided for in this Joint Resolution must be imputed to the institution's executive board.

Art. 7. The responsibilities, duties, and competencies of the board of directors and the executive board of the institution defined in this Joint Resolution cannot be delegated.

CHAPTER IV GENERAL PROVISIONS

Art. 8. The institutions mentioned in Art. 1 must keep documented and updated the policy on the quality of information provided in a single document and segregated from other institutional policies. Art. 9. The institutions mentioned in Art. 1 must communicate to the Central Bank of Brazil, in the manner defined by it: I - any eventual improprieties or irregularities identified and not corrected by the day of sending the information, with details of their scope, relevance, and forecasted deadline for resolution; II - the measures adopted to mitigate the recurrence of identified problems; and III - the action plans to correct identified problems. Art. 10. The Central Bank of Brazil may adopt, within the scope of its legal duties, the measures deemed necessary for the execution of the provisions of this Joint Resolution, which includes, among other measures: I - to establish specific tests of information quality; II - to establish minimum levels of information quality for its acceptance; III - to establish criteria for the preparation and submission of the information quality report referred to in Art. 3, main text , item V, item "b"; IV - to establish a deadline for the resolution of identified problems; V - to reject information submitted, in case of non-compliance with established criteria; VI - to determine the replacement of information provided due to improprieties or irregularities communicated by the institution or due to other deficiencies detected by the Central Bank of Brazil; VII - to determine adjustments and eventual new disclosures or communications of information provided to the public or third parties due to problems in the quality of information provided in the manner of this Joint Resolution; VIII - to determine the adoption of adjustments in cases where inadequacy is confirmed in the policy on the quality of information provided referred to in Art. 1 implemented by the institution; and IX - to determine new preparation and submission of the information quality report referred to in this Joint Resolution, with the corrections deemed necessary, including additional information for the understanding of the evaluation and monitoring of the quality of information provided by the institution. Art. 11. The institutions mentioned in Art. 1 must keep available to the Central Bank of Brazil for, at a minimum, five years: I - the documentation related to the policy on the quality of information provided referred to in Art. 1; and II - the information quality report referred to in Art. 3, main text , item V, item "b". Sole Paragraph. In the case of item I, the deadline referred to in the main text must be counted from the end of the validity of each version of the said policy. Art. 12. The institutions mentioned in Art. 1 must perform the necessary procedures to comply with the provisions of this Joint Resolution by December 31, 2026. Sole Paragraph. The virtual asset service providers that, in accordance with Art. 9 of Law No. 14.478, of December 21, 2022, are subject to the regime of adequacy provided for in the cited device must adopt the measures referred to in the main text observing the deadline for adequacy provided for in the current regulation.

CHAPTER V FINAL PROVISIONS

Art. 13. The following provisions of CMN Resolution No. 4.968, of November 25 2021, published in the Official Gazette of the Union on November 29, 2021, are revoked: I - item "i" of item IV of the main text of Art. 5; and II - the sole paragraph of Art. 5. Art. 14. This Joint Resolution enters into force on January 1, 2026.

GABRIEL MURICCA GALÍPOLO President of the Central Bank of Brazil