Brazil Fines ByteDance Nearly Thirty Million Dollars For Mishandling Teen Data

The ANPD ordered ByteDance Brasil to delete the data of teenagers whose legal representation or parental assistance is not regularized within 60 business days.
As part of the remediation, ByteDance must notify third parties with whom it shared the underage data.
ByteDance is required to submit a technical compliance report signed by its data protection officer, along with system audit logs, within five business days after the initial deadline for data deletion expires.
The regulator noted ByteDance has committed to implementing a compliance plan to improve protection for children and adolescents as part of the action.
Brazil's data protection agency fined ByteDance 153.8 million reais ($29.8 million) for mishandling data from teenagers. ANPD said TikTok Brazil had no legal right to collect information on users ages 13 to 18 and must delete it within 60 business days. The company also faces daily penalties of 137,081 reais if it doesn't comply.
The fine reflects growing global pressure on social media platforms to protect children's data. MLEX reported that TikTok may have collected information on about 20 percent of Brazil's children. The agency ordered ByteDance to notify other companies that received this data and submit detailed audit reports.
TikTok Brazil collected personal information from minors without proper legal justification, ANPD determined. The platform lacked valid consent from parents or guardians for teenagers ages 13 to 18. WSB Radio reported the regulator found ByteDance failed to adequately safeguard children's data, prompting the enforcement action.
ByteDance has 60 business days to delete all improperly collected data from underage users. The company must also tell every third party that received this information. Within five days after deletion is complete, ByteDance must file a technical report signed by its data protection officer, including system audit logs. Failure to meet any deadline costs 137,081 reais per day in penalties.
ByteDance can reduce the fine by 25 percent if it waives its right to appeal and pays within 20 days. The company committed to implementing a compliance plan to improve child protections going forward, according to the regulator.
This fine signals Brazil's aggressive stance on protecting young users online. The country previously ordered Discord to stop livestreaming features over child safety concerns. Social media platforms face increasing pressure worldwide to prove they're keeping minors safe from data misuse and predatory behavior.
ByteDance has not commented publicly on the ruling. The action underscores how regulators are holding tech companies accountable for lax data practices that target vulnerable young users.
Publishers
14
Articles
89
Reach
103