Brazil's data protection agency has hit TikTok with a $30 million fine, citing systemic failures in protecting the personal data of millions of minors.
Brazilian authorities have issued a significant financial penalty against ByteDance, the parent organization of the popular video-sharing platform TikTok. The fine, totaling approximately $30 million, stems from allegations that the company improperly handled the personal information of minors. This enforcement action marks a major escalation in the country's ongoing efforts to hold global social media giants accountable for their data practices regarding younger demographics.
The Brazilian data protection authority determined that TikTok failed to implement sufficient safeguards, resulting in widespread violations of national data privacy laws. These breaches occurred across both registered user accounts and guest browsing sessions, where the platform operated without an adequate legal basis for processing sensitive information. The ruling highlights a growing intolerance among South American regulators for tech companies that prioritize user engagement over the security of vulnerable populations.
Central to the regulator's findings is the estimation that TikTok may have processed the personal data of at least 8 million children and teenagers within Brazil. The authorities pointed to systemic deficiencies in the platform's age-verification mechanisms, which failed to effectively prevent minors from accessing the service or to protect their data once they were on the site. These shortcomings suggest that current internal controls were insufficient to meet the legal standards required under Brazilian privacy legislation.
Beyond the financial penalty, the regulatory body has ordered TikTok to delete all data that was collected unlawfully. This mandate serves as a corrective measure to mitigate the impact of the platform's past data processing activities. While the company retains the right to appeal the decision within a ten-day window, the order signals a firm stance from the government regarding the necessity of maintaining robust digital boundaries for young users.
A specific area of concern for regulators is TikTok’s "logged-out feed" feature, which allows individuals to browse content without the necessity of creating an account. The Brazilian authority noted that this feature is currently available in the region while being restricted in other markets, such as the United States and Europe, where access is generally limited to registered users. This discrepancy in functionality has allowed for widespread, unmonitored use of the platform
Consequently, the ruling requires TikTok to develop and implement a comprehensive youth-protection framework. This framework is intended to address the vulnerabilities inherent in the guest-browsing model. ims to ensure that future operations align with safety standards that prioritize the well-being of the digital youth population over broad, unrestricted accessibility.
This enforcement action is part of a larger trend of increased scrutiny over online platforms in Brazil. Under the administration of President Luiz Inácio Lula da Silva, in conjunction with the Supreme Court, there has been a concerted effort to tighten the regulatory environment surrounding internet usage and safety. These initiatives reflect a global movement, with nations like Canada and Indonesia also taking steps to mitigate the potential harms associated with social media platforms.
The recent action against TikTok follows other high-profile measures, including an order for the communication platform Discord to suspend its livestreaming capabilities. That decision was prompted incident involving a teenager. As Brazil continues to refine its digital policy, it is clear that social media companies will face heightened expectations for transparency, user verification, and the protection of minor data to continue operating within the country.