Brazil fines ByteDance for data breaches affecting minors

Brazil's data protection regulator on Tuesday fined TikTok's parent company ByteDance more than 153 million reais (approximately 25.57 million euros, or nearly $30 million) over alleged failures in handling the personal data of children and teenagers. The National Data Protection Authority (ANPD) said the fine targeted "irregularities in the processing of data belonging to children and adolescents."

The regulator found that TikTok breached Brazil's data privacy laws across both logged-in accounts and guest browsing sessions, collecting and processing young users' personal information without a valid legal basis or adequate safeguards. According to the ANPD, the mechanisms adopted by TikTok "were not sufficient to prevent, from the outset, the improper processing of personal data of children and adolescents."

Required changes and penalties

In addition to the fine, ByteDance is required to delete all data that was gathered illegally and implement a compliance plan to improve the protection of minors on TikTok. The platform must automatically apply stricter privacy settings to accounts belonging to children under 16, strengthen parental supervision systems, and introduce tighter content filters.

For users who access TikTok without logging in, the company must suspend advertising throughout Brazil, restrict content to those suitable for all ages, cap screen time at 12 hours, and disallow posting or live broadcasts in that mode.

ByteDance can appeal the decision within 10 days, according to the regulator. The company did not immediately comment on the ruling.

Regulatory context in Brazil

The action is part of Brazil's broader push to regulate social media platforms, a trend that has intensified in recent years. Earlier this month, the ANPD ordered Discord to suspend live broadcasts and video calls after a teenage girl was allegedly encouraged to take her own life during a stream. Discord's appeal against that suspension is currently under review.

In 2024, X (formerly Twitter) was blocked in Brazil for 40 days until it complied with Supreme Court orders to remove accounts spreading disinformation.

Brazil's government under President Luiz Inácio Lula da Silva and the country's Supreme Court have pursued various measures to regulate internet use by minors, with mixed results so far. Countries including Australia, Canada, and Indonesia are undertaking similar efforts.

Brazil's first lady, Rosângela Lula da Silva, known as Janja, said on Aug. 6 that TikTok should be taken offline, citing the case. She has also been a critic of TikTok's protections for children and teenagers.