Brazil fines TikTok owner ByteDance $29.8 million over teen data handling

Brazil's national data protection authority, ANPD, has imposed a fine of 153.8 million reais (approximately $29.8 million) on ByteDance, the Chinese parent company of TikTok. The penalty, published in the country's official gazette on Tuesday, stems from the company's handling of personal data belonging to users aged 13 to 18.

The regulator determined that ByteDance's local unit processed the data of these teenagers without a valid legal basis, in violation of Brazil's General Data Protection Law. ByteDance Brasil has not yet responded to requests for comment.

Beyond the fine, the ANPD has issued a set of corrective measures. ByteDance must delete the personal data of teenagers whose legal representation or assistance is not regularized within 60 business days. The company is also required to notify any third parties with whom it shared this data.

Additionally, ByteDance must submit a technical report signed by its data protection officer, along with system audit logs demonstrating compliance, within five business days after the initial deadline expires. Failure to comply with these requirements will result in additional daily fines of 137,081.49 reais.

The ANPD noted that the total fine could be reduced by 25% if ByteDance waives its right to appeal within 10 business days and pays the penalty within 20 business days.

This action is part of a broader push by Brazilian authorities to strengthen safeguards for minors on online platforms. Earlier this month, the ANPD ordered the chat platform Discord to suspend its livestreaming features over concerns about harmful content exposure for children and teenagers. The move also reflects a global trend, with countries such as Australia, France, and China either imposing or considering stricter regulations on minors' social media use.