AMZ123 has learned that Brazil's National Data Protection Authority (ANPD) announced a fine of 153.7 million reais (about $29.9 million) against TikTok's parent company ByteDance for violations in protecting children's and adolescents' personal data.

The investigation covered TikTok's logged-in and logged-out experiences in Brazil. ANPD said TikTok had not taken sufficient measures to prevent children and adolescents from entering the platform, and had problems handling their personal data, which was also used to serve ads to minors.

The investigation concluded TikTok committed five violations related to Articles 6 and 7 of Brazil's General Data Protection Law (LGPD).

Specifically, for users who use TikTok without registering an account, ANPD found the platform lacked a valid legal basis for processing children's and adolescents' personal data and did not take adequate measures to prevent such processing.

For registered accounts, similar issues existed, including processing of personal data when children and adolescents create accounts, and inadequate mechanisms to block minors from registering.

ANPD also found TikTok did not provide sufficient evidence that its technical and organizational measures could effectively meet minors' data protection requirements.

Beyond the fine, ByteDance was ordered to delete improperly collected data and implement a new compliance program to strengthen protections for children and adolescents. Under the plan, TikTok must automatically apply stricter privacy settings to accounts of users under 16, which can only be changed with guardian authorization. It must also enhance parental supervision tools and introduce stricter content filtering.

TikTok's logged-out experience will also change significantly. Under ANPD's requirements, the platform must suspend ads to logged-out users in Brazil, reduce personal data collection and processing, and limit visible content to what is suitable for all ages.

Logged-out users will also be limited to 12 hours of use and will not be able to create content, comment, send direct messages, livestream, or follow other users.

For content recommendations, TikTok must reduce personalization. ANPD requires processing to be limited to what is necessary for basic functions—such as language, region, anti-fraud, and app performance—but not broadly for personalized recommendations.

Additionally, TikTok must strengthen age identification. In another decision published on August 25, ANPD's board approved ByteDance's compliance plan at the appeal stage, but required ByteDance to implement age verification requirements under the Children's and Adolescents' Digital Law according to the timeline and future guidance.

ANPD last week launched compliance checks on 22 social media networks and platforms to determine whether they comply with this year's child and adolescent online protection law, and expects "stronger enforcement actions" in the coming months.

ANPD said this regulatory action led TikTok to commit to measures including fully suspending ads and disabling livestreaming and direct messages for logged-out users, which will significantly reduce previously identified risks to children and adolescents.

TikTok disputed the fine, saying it targets issues identified in 2021 and does not consider measures the platform has implemented since then.

TikTok said that over the past six years it has launched more than 50 safety features for teens, including restricting direct messages for children under 16, not recommending content posted by this age group to strangers, and allowing parents to set screen time limits and block accounts. It said it has maintained transparent, cooperative communication with ANPD, leading to a compliance plan approved by ANPD in 2025.

TikTok believes the fine reflects an earlier period and does not account for that plan or later proactive measures. ByteDance can still appeal the fine within 10 days of receiving notice.

This is not TikTok's first recent regulatory pressure on child protection. Last week, TikTok agreed to pay $400 million to the U.S. Department of Justice to settle claims that it collected children's personal data without parental consent.

Brazil has also been tightening regulation of social platforms. In 2024, platform X was blocked in Brazil for 40 days until owner Elon Musk complied with the Supreme Court's demands to remove accounts spreading disinformation.

Author: Summer/AMZ123
Disclaimer: This article is copyrighted by AMZ123. Reproduction without permission is prohibited. For authorization, contact: amz123happy

SellerHome Comment

Brazil's tough data enforcement warns cross-border sellers to prioritize minors' data compliance in the Brazilian market, especially in social media and e-commerce. Review data collection processes immediately, update privacy policies according to LGPD standards, and assign dedicated compliance staff to avoid heavy fines.

Source: TikTok Cross-border News
Original link: https://www.amz123.com/t/Vtp4zJY6