Title: ByteDance Fined $30 Million in Brazil for Mishandling Teenagers' Data
ByteDance, the parent company of TikTok, has been fined approximately $30 million in Brazil for mishandling the personal data of teenagers. The Brazilian data protection authority found that ByteDance processed data of users aged 13 to 18 without a valid legal basis. The fine of 153.8 million reais was imposed by Brazil's National Data Protection Authority (ANPD) for failing to meet legal requirements in processing teenagers' personal data. ByteDance has been instructed to take corrective actions to address the issue.
The regulatory action requires ByteDance to delete the personal data of teenagers without proper legal representation within 60 business days. Additionally, the company must inform third parties that received the affected data and provide a technical report signed by its data protection officer. ByteDance is also mandated to submit system audit logs demonstrating compliance with the regulator's directives. Failure to comply with the data deletion could result in additional daily fines.
ByteDance has the option to reduce the total penalty by 25% if it waives its right to appeal within 10 business days and pays the fine within 20 business days. This enforcement action reflects the increasing scrutiny by governments and regulators worldwide on how social media platforms handle the data of children and teenagers. Brazil has previously taken similar actions against online platforms like Discord to protect minors from exposure to harmful content.
The fine imposed on ByteDance in Brazil adds to the mounting regulatory pressure on TikTok regarding the safety and privacy of younger users. As global authorities intensify their oversight of social media platforms, companies like ByteDance are facing greater scrutiny and accountability for safeguarding the personal data of minors.