Brazilian data authority fines ByteDance 153.7 million reais over alleged child data violations

Scale of the penalty

Under Brazil's data protection framework, companies are required to obtain verifiable parental consent before collecting personal information from children and to apply heightened safeguards to that data. The ANPD's decision signals that international platforms operating in the country will be held to those standards, regardless of where their headquarters are based.

ByteDance, headquartered in Beijing, has not yet publicly indicated whether it will appeal the ruling. The company has previously contested other regulatory actions in multiple jurisdictions, arguing that local penalties fail to account for the cross-border nature of digital services.

Legal framework in Brazil

The fine comes as Brazilian authorities have stepped up oversight of social media companies. Lawmakers and regulators in Brasília have pushed for stronger protections for minors online, including age-verification requirements and limits on targeted advertising directed at children.

Industry analysts note that the size of the penalty could set a benchmark for future enforcement across Latin America. Several other countries in the region are examining similar safeguards, and a high-profile Brazilian case is likely to inform those discussions.

Broader regional implications

TikTok has grown rapidly among Brazilian teenagers and pre-teens, making the country one of the platform's largest markets in the region. The ANPD's action underscores how regulators are recalibrating the balance between commercial growth and the protection of young users.

The authority's statement did not specify a deadline for payment, but under Brazilian law companies that fail to comply with ANPD rulings can face additional daily fines. ByteDance's legal team is expected to review the decision in detail before deciding on a response.