Brazil’s National Data Protection Authority (ANPD) has fined ByteDance, the parent company of TikTok, 153.7 million reais nearly $30 million over alleged violations involving the collection and processing of children’s and teenagers’ personal data.
The decision, published on August 25, 2026, found that TikTok processed minors’ personal information without an adequate legal basis and failed to implement sufficient safeguards to prevent the improper processing of their data. The findings covered both registered users and people accessing TikTok’s feed without an account.
Data Protection Concerns
According to the ANPD, TikTok’s age-verification and prevention mechanisms were not effective enough to stop children and teenagers from accessing the platform or having their personal information processed. Reuters reported that the regulator estimated that data from at least 8 million minors may have been processed during the period under investigation.
The regulator has ordered ByteDance to delete personal data collected improperly. Under the ruling, data belonging to teenagers aged 13 to 18 must be removed if the required parent, guardian or legal representative arrangements are not properly established within the prescribed period. TikTok also has to implement a compliance plan aimed at strengthening privacy and safety protections for minors.
ByteDance has the right to appeal the decision within 10 business days. The company has said the penalty relates to conduct dating back to 2021 and does not reflect measures included in a compliance plan approved by the ANPD in 2025 or additional safeguards introduced since then.
Wider Global Pressure on TikTok
The Brazilian action comes as governments and regulators around the world increase scrutiny of social media platforms over children’s privacy and online safety. Just days before the Brazilian decision, TikTok agreed to a $400 million settlement with the U.S. Department of Justice over allegations involving children’s online privacy.
Brazil’s latest action sends a strong signal to technology companies operating in the country that protecting minors’ personal information is becoming a major regulatory priority. The case also highlights growing international demands for stronger age verification, parental controls and privacy-by-default measures on platforms used by children and teenagers.
________________________________________________________________________________________________________________
