Brazil's data protection agency, the ANPD, fined ByteDance R$153.7 million, or roughly $30 million, for collecting and processing children's and teenagers' data with no valid legal basis, both in TikTok's logged-out feed and in registered accounts. The agency found five violations of Brazil's LGPD privacy law, the largest sanction it has issued since it was created. Regulators said TikTok leaned entirely on self-declared age, which users can easily falsify, and cited the company's own figure of 7.75 million accounts belonging to Brazilian children under 13 that it banned between October 2022 and September 2023. ByteDance must delete what it gathered improperly and carry out a compliance plan that includes age checks under Brazil's ECA Digital law. It has 10 business days to appeal.
