Brazil Fines TikTok Over 25 Million Euros for Child Data Violations

Brazil has imposed a fine of approximately 25.5 million euros on TikTok's operator, ByteDance, for violating the country's data protection law. The National Data Protection Authority (ANPD) stated that the platform unlawfully processed personal data of children and adolescents without adequate legal basis and failed to implement sufficient preventative measures. The authority identified five distinct violations of the Brazilian General Data Protection Law (LGPD).

The violations reportedly concern the use of TikTok both with and without user registration. In addition to the financial penalty, ByteDance is required to delete unlawfully collected data and implement a plan to enhance the protection of children and adolescents. Stricter privacy settings for users under 16 are mandated, along with improved parental controls and safeguards against inappropriate content.

“

The platform processed personal data of children and adolescents without sufficient legal basis and did not take enough measures to prevent it.

This ruling comes as TikTok faces increasing pressure globally regarding its data handling practices, particularly concerning minors. In the United States, TikTok recently settled with the U.S. Department of Justice for $400 million over allegations of allowing children under 13 to create accounts without parental consent, violating the Children's Online Privacy Protection Act. The EU Commission has also expressed concerns, warning TikTok about insufficient protection against risks like cyberbullying and urging adjustments to settings that make minors' content publicly visible.

“

The possibility for children and adolescents to create a publicly accessible profile on the platform can lead to 'unwanted contact, cyberbullying or exploitative behavior'.