ANPD fines TikTok millions over children's data

Brazil's National Data Protection Authority (ANPD) has imposed a fine of R$ 153.7 million on ByteDance Brasil, the company responsible for TikTok, due to the collection and processing of data from children and adolescents. The penalty was disclosed in a report pointing out the platform's failures in preventing access by children under 13 and in blocking navigation without registration.

How access without registration worked in Brazil

TikTok allows anyone in Brazil to watch videos on the app without creating an account or providing their age. This feature has become one of the main entry points for children onto the platform, creating a parallel pathway for those blocked by the age verification mechanism.

Collection of interactions and behavioral profiling

Even without logging in, the platform collected records of interaction attempts made by logged-out users, such as attempts to like videos, comment, share, or follow accounts. According to the ANPD, recording these attempts allows the algorithm to identify interests and build a predictive and behavioral profile of the users.

Difference compared to other countries

Browsing the app on mobile devices without logging in was only possible from Brazil in tests conducted by the inspection team. In the United States and the European Union, TikTok requires registration for users to watch videos on mobile devices, aligning the platform's operation with local legislation.

Required changes and compliance plan

In addition to the fine, the decision establishes the complete suspension of ads in the unauthenticated experience and a reduction in the amount of data collected in this mode. The company will also have to adopt more restrictive privacy settings for user accounts under 16 and reinforce parental control mechanisms.

With information from O GLOBO, Folha de S.Paulo, VEJA.