Brazil Imposes Heavy Fine on ByteDance for Child Data Violations
Aisha Mensah | AA
Brazil's National Data Protection Authority has fined ByteDance $29.8 million, citing violations in processing children's data on TikTok, including orders for the company to enhance data protection measures.
Brazil’s National Data Protection Authority (ANPD) has imposed a significant fine of 153.7 million Brazilian reais ($29.8 million) on ByteDance, the owner of TikTok. The penalty addresses violations related to the processing of personal data belonging to children and adolescents, as specified in the official government publication.
The fine results from an administrative process that uncovered several breaches of Brazil’s General Data Protection Law (LGPD). As part of the resolution, ByteDance has been instructed to implement a compliance plan designed to enhance the platform’s data protection measures for children and adolescents.
The company is further directed to erase data gathered inappropriately and to improve privacy protection systems across its platform.
Key Findings from the Investigation
The ANPD investigation detailed irregularities in TikTok's data processing methods for minors in Brazil, highlighting two specific points of access. These include the 'feed without registration,' which allows users to access content without creating an account, and the 'feed with registration,' linked to a user profile.
In both scenarios, the ANPD discovered that TikTok processed the personal data of children and adolescents without an adequate legal basis and failed to implement necessary preventive measures. Such practices are in direct violation of the LGPD, prompting the authority to enforce strict corrective actions.
A newly mandated compliance plan requireshat TikTok will apply its strictest privacy settings automatically to all accounts of users under 16, with changes permitted only with parental or guardian consent.
Broader Implications for TikTok's Operations
As part of its corrective action, ByteDance is required to enhance parental supervision systems and enforce stricter content filtering measures. For non-registered users in Brazil, TikTok must suspend all advertising and focus content to be suitable for all age groups, while drastically reducing personal data collection.
These measures include limiting platform access to a 12-hour window per day, disabling content creation, commenting, direct messaging, following other users, and livestreaming for unregistered users. These restrictions are intended to minimize risks to the privacy rights of minors.
The investigation's findings and the compliance requirements have been documented in Technical Note No. 50/2024/CGF/ANPD by the ANPD’s Supervision Department, revealing consistent breaches in both registered and non-registered user scenarios.
Impact on Urban Governance and Digital Oversight
The fine imposed on ByteDance highlights the increasing importance of data privacy in urban environments, especially as cities become more connected through digital platforms. As authorities crack down on data violations, municipal leaders must advocate for stringent oversight to protect younger populations.
Implementing robust data privacy frameworks could lead to improved safety and privacy standards for online platforms operating within city limits. Such measures are essential for developing trust between residents and digital service providers and ensuring that companies comply with local data protection laws.
With evolving digital governance challenges, city leaders should collaborate closely with national entities to reinforce regulations that hold technology firms accountable, ensuring responsive and secure environments for all citizens,particularly vulnerable groups like children.
Questions That Matter
What fine did Brazil impose on ByteDance?
Brazil’s National Data Protection Authority fined ByteDance 153.7 million reais ($29.8 million) for processing children’s and adolescents’ data on TikTok without proper legal basis, as per Brazil's General Data Protection Law.
What changes will TikTok make for children?
Under the compliance plan, TikTok will apply the most restrictive privacy settings to users under 16. Changes to these settings require parental permission to enhance data protection for minors.