Brazil ANPD: Levies TikTok Child Data Fine of $29.9 Million

• Brazil's National Data Protection Agency (ANPD) fined TikTok nearly $30 million for irregularities in processing child and adolescent data.
• TikTok's parent company, ByteDance, was ordered to delete illegally collected data and committed to a compliance plan, which the ANPD has approved.
• The compliance plan requires TikTok to implement stricter privacy settings for users under 16, enhance parental supervision, and improve content filters.
• This action is part of Brazil's tougher regulatory approach, which also saw the ANPD order Discord to suspend livestreams and X blocked for non-compliance. Discord's appeal against the suspension is currently under review.
• A recent Brazilian law, the Digital ECA, which took effect in March 2026, mandates linking accounts of users under 16 to parents' accounts and age verification on social media platforms.

This enforcement action serves as a clear warning to all social media platforms operating in Brazil that lax data management practices, particularly those affecting children and adolescents, will not be tolerated.

Brazil's National Data Protection Agency (ANPD) has levied a substantial financial penalty against TikTok, citing significant issues with the platform's handling of data pertaining to children and adolescents. The regulatory body announced a fine totaling 153.7 million reais, which converts to approximately $29.9 million, for what it described as "irregularities in the processing of data belonging to children and adolescents." This enforcement action, marking a notable Brazil ANPD TikTok child data fine, underscores a growing global trend of heightened scrutiny over how social media giants manage the personal information of their youngest users.

Beyond the monetary sanction, the ANPD issued a directive to ByteDance, TikTok's parent company, mandating the deletion of all data that was collected in contravention of established regulations. In response to the ANPD's findings, TikTok has committed to implementing a comprehensive compliance plan designed to enhance the safeguarding of children and adolescents on its platform. This commitment signals a proactive step by the company to address the identified data protection deficiencies, emphasizing ByteDance Brazil data protection responsibilities. The ANPD separately approved ByteDance's compliance plan.

The agreed-upon compliance plan outlines several key operational changes for TikTok in Brazil. Specifically, the platform will be required to automatically activate stricter privacy settings for all accounts registered to users under the age of 16. Furthermore, TikTok must bolster its existing parental supervision systems, providing guardians with more robust tools to monitor and manage their children's online activity. The plan also includes the implementation of more stringent content filters to protect minors from inappropriate material. For users accessing TikTok without an account, the company will suspend advertising in Brazil, limit access to content appropriate for all ages, and reduce the collection and processing of personal data. When contacted for comment by AFP, TikTok did not provide an immediate response regarding the ANPD's decision.

This significant TikTok Brazil child privacy penalty is part of a broader, more assertive regulatory stance adopted by Brazil in recent years concerning social media platforms. The nation has been progressively tightening its legal framework to ensure greater accountability from technology companies, particularly regarding the protection of vulnerable users. A notable recent legislative development mandates that platforms establish links between accounts belonging to users under 16 and their parents' accounts, alongside implementing robust age verification mechanisms, highlighting Brazil social media child data compliance efforts. This refers to Brazil's Digital ECA (Estatuto Digital da Criança e do Adolescente), which was signed into law on September 17, 2025, and took effect on March 17, 2026.

The Brazil National Data Protection Agency TikTok actions extend beyond this case, demonstrating a consistent pattern of intervention. Earlier this month, the agency issued an order to the popular streaming platform Discord, instructing it to suspend livestreams and video calls. This directive followed serious allegations that a teenage girl was encouraged to take her own life during a broadcast on the platform. Discord subsequently filed an appeal against this suspension on Monday, which is currently under review by the ANPD, indicating ongoing regulatory engagement across various platforms.

Further illustrating Brazil's firm approach to digital governance, the social media platform X faced a 40-day block within the country in 2024. This suspension remained in effect until the platform, owned by Elon Musk, complied with orders from the Supreme Court to remove specific accounts that were accused of disseminating disinformation. These instances collectively paint a picture of a regulatory environment where non-compliance with national laws carries substantial consequences.

The substantial fine and mandated operational changes signal a critical juncture for data protection and online safety within Brazil. The ANPD's decision not only imposes a significant financial burden but also mandates fundamental changes to TikTok's operational practices concerning minors. This move by the Brazil National Data Protection Agency TikTok underscores the increasing global pressure on tech companies to prioritize user safety and privacy, especially for younger demographics, and highlights the growing importance of LGPD child data enforcement Brazil.

This enforcement action serves as a clear warning to all social media platforms operating in Brazil that lax data management practices, particularly those affecting children and adolescents, will not be tolerated. The requirement for stricter privacy settings, enhanced parental controls, and improved content filtering represents a direct response to the identified "irregularities" and aims to establish a higher standard for child data protection. The ANPD's proactive stance reinforces the legal obligations under Brazil's data protection laws.

The cumulative effect of these regulatory interventions, from the TikTok fine to actions against Discord and X, demonstrates Brazil's unwavering commitment to enforcing its digital regulations. Companies operating within the country must now contend with a regulatory body that is prepared to levy significant fines and impose stringent operational requirements to ensure compliance, particularly in the sensitive area of child data management.

This enforcement action by Brazil's ANPD signals increased regulatory scrutiny and significant financial penalties for social media platforms failing to comply with child data protection regulations. Lawyers and compliance officers advising companies operating in Brazil, particularly those handling data of minors, should review their data processing practices, privacy settings, and parental consent mechanisms to mitigate similar compliance risks and potential fines.

Source: Original reporting via AFP.