Brazil Fines TikTok $41 Million for Illegally Collecting Minors' Data

Brazil's data protection authority has imposed a significant fine on TikTok's parent company, ByteDance, marking the first such penalty against a major social media platform in the country. The National Data Protection Authority (ANPD) levied a fine of approximately 153.77 million Brazilian reais (about $41.2 million) for violations of the General Data Protection Law (LGPD).

The ANPD found that ByteDance unlawfully processed the personal data of children and adolescents under 18 without a valid legal basis. The authority also mandated the deletion of personal data belonging to minors aged 13 to 18, collected without parental consent, within 60 business days. Furthermore, ByteDance must notify any third parties who received this data to also delete it.

Concerns were also raised about TikTok's "non-login feed" feature, which allows users to view content without an account. The ANPD noted this feature enables broad access to TikTok without age verification, and that the platform lacked adequate safeguards against the risks associated with processing large volumes of children's personal data.

TikTok responded by stating the fine relates to actions in 2021 and does not reflect its current compliance measures and enhanced protections implemented since then. The company asserted its current practices adhere to Brazilian data protection laws for all users, logged in or not, and that it is reviewing its legal options while engaging with regulators.

Brazil has recently intensified its focus on child and adolescent protection, including mandating parental account linking for users under 16 and suspending live broadcasting on platforms like Discord due to its misuse in criminal activities, such as the livestreaming of a child's suicide.

“

We are reviewing the regulatory authority's decision and will continue to engage with them.