Full Breakdown
Brazil fines TikTok owner ByteDance nearly $30 million for child data violations
8/26/2026, 10:03:05 PM
Core Event: ANPD imposes record fine on TikTok
On August 25 2026, Brazil’s National Data Protection Authority (ANPD) announced a fine of 153.7 million reais (about $29.8 million) against ByteDance, the parent company of TikTok, for processing personal data of users aged 13-18 without a valid legal basis. The regulator ordered immediate deletion of the unlawfully obtained data and required a compliance plan within ten days.
Background & Context
Brazil has tightened oversight of digital platforms under President Luiz Inácio Lula da Silva. A law passed in March 2024 obliges platforms to link accounts of users under 16 to a parent or guardian and to verify ages before granting access. The ANPD, created in 2020, previously ordered Discord to suspend livestreams after a teenage suicide case. This TikTok sanction is the agency’s largest monetary penalty to date.
Data & Statistics
- The ANPD estimated TikTok processed data of at least 8 million children during the review period.
- Five LGPD breaches were identified across the “registered feed” (logged-in users) and the “unregistered feed” (guest browsing).
- Daily non-compliance fines are 137,081.49 reais (? US$26 000) for each unmet requirement, such as failure to delete data within 60 days.
- Under the compliance plan, accounts for users under 16 will receive the most restrictive privacy settings, with any changes requiring parental authorization.
- For the unregistered feed, TikTok must suspend advertising, limit screen time to 12 hours, and block posting, commenting, direct messaging, following, and livestream viewing.
Official Statements & Responses
ANPD Director Lorena Giuberti Coutinho said the action signals the agency’s commitment to protecting minors’ data. Enforcement superintendent Fabrício Guimarães Madruga Lopes noted TikTok’s “logged-out feed” allowed widespread access by minors without effective age-verification, a feature not permitted in the United States or Europe.
ByteDance responded that the fine relates to conduct dating back to 2021 and does not reflect a compliance plan approved in 2025 or safeguards introduced since then. The company maintains its measures comply with Brazilian law and will engage with the regulator while considering legal options.
Conflicting Reports & Gaps
Sources differ on the exact fine amount: most report 153.7 million reais, while two outlets cite 153.8 million reais. All agree the penalty is roughly $30 million. No source provides a definitive breakdown of how the daily fine will be applied, leaving the total potential additional liability unclear.
What’s Next
The ANPD gave ByteDance ten days to appeal. If the company waives its right to appeal and pays promptly, the fine could be reduced by 25 percent. The regulator also opened monitoring proceedings for 22 other platforms to assess compliance with Brazil’s Digital Child and Adolescent Statute, with further enforcement actions expected in the coming months.
