Brazil Investment Adviser Rules: CVM 178 and ANBIMA's 2026 Certification Overhaul

Brazil splits the competence question in two, and a firm that looks in only one place will get it wrong. The legal requirement to be accredited sits with the securities regulator, the Comissão de Valores Mobiliários. The continuing education that keeps an accreditation alive is not written by the CVM at all — it is delegated to the accrediting entity, with the CVM approving the programme. Separately, the market's self-regulatory certifications, run by ANBIMA, are being replaced wholesale, with a hard deadline of 31 December 2026.

Both tracks matter to a training or compliance lead, and they are not the same track. This guide sets out each as the primary sources state it, as at October 2026.

Resolução CVM 178: accreditation is mandatory, and the regulator names no body

Resolução CVM nº 178, dated 14 February 2023 and in force from 1 June 2023, governs the activity of the assessor de investimento — the investment adviser, the role formerly called agente autônomo de investimento. Article 43 revokes Resolução CVM nº 16 of 9 February 2021. The resolution does not use the old term except in one transitional provision: article 44, paragraph 2 lets a company whose name still contains "agente autônomo de investimento" change it at the next amendment of its contrato social.

An assessor de investimento is a natural or legal person registered under the resolution to act under the responsibility of, and as agent (preposto) of, an intermediary in the securities distribution system. Article 3 defines the permitted activities: prospecting and winning clients, receiving, recording and transmitting orders, and providing information about the products and services of the intermediaries it acts for.

The accreditation requirement

Article 13 states plainly that accreditation (credenciamento) of investment advisers is mandatory, and article 11 requires the adviser to be registered under the resolution. Article 12 provides that the CVM grants registration automatically to persons accredited under it, and registration is evidenced by inclusion in the list of investment advisers published on the CVM's own website.

Article 14 is the provision most often misread. Accreditation is carried out by accrediting entities (entidades credenciadoras) authorised by the CVM. The resolution does not name any entity. Article 38 describes only the test an entity must meet: it must demonstrate adequate structure and technical capability. Any statement that a particular association is "the" accrediting body for Brazilian investment advisers is not something this resolution says.

What an individual adviser must satisfy

Article 15 sets the minimum requirements for a natural person:

• completed secondary education (ensino médio) in Brazil, or an equivalent qualification abroad
• having passed technical and ethical qualification examinations defined by the CVM
• not being disqualified or suspended from office at institutions supervised by the CVM, the central bank, SUSEP or PREVIC
• no final criminal conviction for the listed offences, which include money laundering and crimes against the financial system
• not being barred by a court from managing their own assets

The sole paragraph of article 15 is the part a training team should note: it is for the CVM to approve in advance the programme of the examinations used for certification, and their periodicity. The syllabus and the frequency are therefore regulatory decisions, but neither appears in the resolution itself — so the current programme has to be read from the CVM's approval, not inferred from the rule.

For legal persons, article 16 requires a CNPJ registration, a head office in Brazil, the activity in the corporate purpose, and a responsible director (diretor responsável). There is no examination requirement at entity level. Paragraph 1 requires "assessor de investimento" or "AI" in the company name. Paragraph 2 blocks a natural person from being an adviser while also being a partner, employee or contractor of an intermediary or of another adviser company, and from serving more than one adviser company.

The continuing education obligation, and who actually carries it

This is the structural feature that makes Brazil unusual, and it is worth stating precisely.

Article 39, item II requires the accrediting entity to establish a continuing education programme (programa de educação continuada) so that the advisers it accredits periodically update and improve their technical capability. Article 39, paragraph 2, item II requires the CVM to approve that programme in advance. The resolution sets no number of hours, no cycle length and no format. Those live in the entity's CVM-approved programme.

So the duty to build the programme is the entity's, the duty to approve it is the regulator's, and the duty to complete it is the adviser's — but the consequence is sharper than that chain suggests. Article 19, item IV makes failure to comply with the conditions of the continuing education programme a ground on which the entity cancels an accreditation. And article 21, which gives an adviser ten business days to respond before cancellation, applies only to the grounds in article 19 items II, III and VI. Item IV is not among them. On the face of the resolution, cancellation for failing continuing education does not attract the prior-response right that other cancellation grounds do.

Article 42, item IV compounds it: breaching article 39 is classified as a serious infringement (infração grave) under article 11, paragraph 3 of Lei nº 6.385/1976. Article 40, item II requires the entity to report any sign of a serious infringement to the CVM immediately.

The practical reading for a firm is that continuing education in Brazil is not an administrative tidiness matter. It is a condition of the adviser's accreditation, its loss is the entity's decision, and the usual procedural cushion is not drafted to cover it.

What the resolution puts on the intermediary

A compliance team at the intermediary carries more of this than the adviser does.

• Article 28 requires the intermediary to extend its policies to its advisers, supervise them, report suspected breaches to the CVM and to self-regulators, publish its rules and updates on its website, and appoint a director in charge.
• Article 27 makes the intermediary answerable to clients and third parties for the acts of its agent, within the limits of the adviser's role.
• Article 35 sets a supervision floor: monitoring client transactions including periodic contact with clients, monitoring the advisers' own transactions, and checking electronic data on order origin and irregular access. Article 33 runs that duty across the whole contract term.
• Article 29 requires the intermediary to verify the adviser's registration, formalise the relationship in a written contract and keep the related records.
• Article 30 requires the list of advisers to be kept current on the intermediary's own site and on the entity's site, within five business days of a change.
• Article 37 requires a signed acknowledgement (termo de ciência) from each client, with the minimum content set out in Annex A, and paragraph 2 bars executing an adviser-directed order before it is signed. Article 44, paragraph 1 gave firms until 2 January 2024, or the client's next record update if sooner, to obtain it for clients held on 1 June 2023.
• Article 31 is the commercially significant one: the intermediary pays the periodic accreditation fees and may not pass them on to the adviser.
• Article 41 requires advisers, intermediaries and entities to keep the required documents for at least five years, longer if the CVM requires. Digital images may replace originals.

Article 40, item I requires the entity to send the CVM the registration data of advisers accredited, suspended or cancelled within five business days. Article 18 allows a suspension of up to 36 months on proof of inactivity, and article 19, item VI makes a suspension longer than 36 months a ground for cancellation.

ANBIMA's certifications are being replaced, and the deadline is firm

Running alongside the CVM regime is ANBIMA's certification framework, which is the thing most Brazilian market staff mean when they talk about being certified. It is being rebuilt.

ANBIMA Edu now lists three certifications in place of the familiar three:

• CPA (Certificado Profissional Anbima) — described as the first step, suited to commercial functions in investment distribution: prospecting, client service and support.
• C-Pro R (Certificado Profissional Anbima de Relacionamento) — for commercial roles focused on relationships, and described as allowing the holder to carry out investor profile analysis and recommend a detailed portfolio of the available investment products, including presenting their risks. CPA is a prerequisite.
• C-Pro I (Certificado Profissional Anbima de Investimento) — product-focused, and described as fundamental to building recommended portfolios. CPA is a prerequisite.

ANBIMA describes the structure as a Y-shaped journey (jornada em Y) beginning with CPA.

The migration map is not symmetrical

This is the detail that will catch firms out. The migration paths ANBIMA publishes are:

• A CPA-10 holder may migrate to CPA. No path to C-Pro R or C-Pro I is listed.
• A CPA-20 holder may migrate to CPA and to C-Pro R. No path to C-Pro I is listed.
• A CEA holder may migrate to CPA, C-Pro R and C-Pro I.

A CPA-20 holder whose job involves building recommended portfolios therefore has no listed migration route to the certification ANBIMA describes as fundamental to that work. Any firm with a population of CPA-20 holders doing portfolio work should be mapping this now rather than in December.

The migration criteria contain no examination

ANBIMA lists three criteria for migrating to the new certifications: holding an active CPA-10, CPA-20 or CEA; completing all the microcertifications indicated in ANBIMA Edu; and paying the annual update. No examination appears among them.

Until the end of 2026, holders of the old certifications carry an "in transition" (em transição) status in ANBIMA's system, because those certifications have been discontinued. The new certification activates only once every step is complete, and the obligatory steps must be finished by 31 December 2026. From 2027 it becomes possible to keep a certification inactive for up to three years, with reactivation available at any time without a new examination and without retroactive payment — the annual update payment alone suffices.

That annual update (atualização anual) is worth describing accurately, because the word invites an assumption. On ANBIMA's pages the annual update is described as a payment. The pages do not state any examination, course or hours requirement attached to it. Compare that with regimes such as FINRA's annual Regulatory Element under Rule 1240, or the hours-based obligations in Kenya's 35-hour CPD regime, and Brazil's self-regulatory layer is doing something different: it maintains a register and a fee, not a learning requirement.

The new examination format, as ANBIMA describes it, is advanced multiple choice with interactive questions, short written answers and case studies — a departure from a pure multiple-choice paper.

ANBIMA's pages list the following figures. They carry no publication date beyond a 2025 copyright line, so treat them as the amounts shown rather than as confirmed current pricing, and check before budgeting: examinations at R$225 for CPA and R$500 for each C-Pro; annual update at R$115 for CPA alone and R$325 for CPA plus one or both C-Pros; and an annual update obtained through an institution listed at R$30 in all three tiers. ANBIMA's page does not explain what qualifies as the institutional route, which is a question worth putting to them before assuming a firm can access it.

What ANBIMA's pages do not say

Three gaps should keep a compliance lead from over-reading the self-regulatory layer.

The pages do not state whether the certifications are a legal requirement or a self-regulatory one, and they cite no CVM rule and no ANBIMA code as the basis for the requirement. The only code named is the Código de Conduta Ética Anbima, described as the nine ethical principles guiding the conduct of ANBIMA-certified people — which is a conduct document, not an authority for the certification obligation.

The pages do not list the roles or the types of institution that must hold each certification. They describe who each certification suits, not who must have it.

And the pages do not state when the old examinations stop being offered. ANBIMA's exam calendar page redirected to the ANBIMA Edu homepage when this guide was written, and no calendar was available there.

How the two layers fit together

For a firm operating in Brazil the division of labour runs roughly like this. The CVM sets who may act as an investment adviser, requires accreditation through an entity it authorises, defines and pre-approves the qualification examinations, requires the entity to run a CVM-approved continuing education programme, and makes failure in that programme a ground for losing accreditation. ANBIMA, separately, runs market certifications that signal competence for distribution and advisory functions, is replacing its three legacy certifications with a prerequisite-based set of three, and is maintaining them through an annual payment rather than a recurring assessment.

The error to avoid is treating an ANBIMA certification as satisfying the CVM's requirement, or treating the CVM's silence on hours as meaning there is no continuing education obligation. The obligation exists; it simply sits in a document the resolution points at rather than in the resolution. Brazil's design here is closer to Nigeria's approved persons regime, where the detail lives in a framework beneath the rules, than to a jurisdiction that writes hours into the rulebook itself.

A working checklist

• Identify which accrediting entity accredits each of your advisers, and obtain its current CVM-approved continuing education programme. The numbers are in that document, not in Resolução CVM 178.
• Note that cancellation for failing continuing education is not within article 21's prior-response procedure, and build internal escalation accordingly.
• Confirm you are not charging advisers the periodic accreditation fees, which article 31 places on the intermediary.
• Check the adviser list on your own website and on the entity's site is current within five business days, per article 30.
• Confirm every client has a signed termo de ciência meeting Annex A before any adviser-directed order is executed.
• Check your record retention covers at least five years under article 41.
• Map your CPA-10, CPA-20 and CEA population against ANBIMA's migration paths, and flag CPA-20 holders doing portfolio work, who have no listed route to C-Pro I.
• Book the microcertifications and annual update payments needed to complete migration before 31 December 2026, rather than treating the deadline as an exam date.
• Replace any procedure still referring to agente autônomo de investimento or to Resolução CVM 16.

The December 2026 deadline is the immediate item. It is not an examination deadline, which makes it easy to under-plan: it is an administrative completion deadline, and an adviser who misses it holds a discontinued certification with an in-transition status and no activated replacement.