Brazil’s data protection regulator ANPD has fined ByteDance, the parent of TikTok, 153.7 million reais for alleged violations of the Brazilian data protection law related to handling data of minors aged 13 to 18.

In addition to the penalty, TikTok must enter stricter filtering for content and, in the unregistered (guest) version, halt advertising, limit user experience to age-appropriate material, and reduce processing of personal data.

ANPD says TikTok collected and processed personal data of young users without a valid legal basis or adequate safeguards in both logged-in and guest sessions.

The action reflects Brazil’s alignment with international trends toward tougher online protections for children, as regulators worldwide tighten scrutiny.

Context includes past Brazilian enforcement actions, such as an August intervention ordering a live-stream suspension on Discord after a teenage suicide incident, with ongoing appeals and references to earlier platform actions during Supreme Court cases.

Key upcoming milestones include the timing of ByteDance’s appeal decision, the process for deleting guest-session data, and potential wider implications if other authorities adopt similar guest-browsing findings.

TikTok can appeal the decision within ten days, though the company has not issued a public comment.

The company’s German-language note confirms the ten-working-day window to appeal, reinforcing that timing while no public statement has been made.

ANPD seeks to demonstrate its seriousness by pursuing enforcement across multiple platforms and by enforcing a new child-protection law that could trigger further actions.

The ruling notably addresses guest-session data (browse-only users) and expands child-protection enforcement beyond signed-in accounts.

There are discrepancies in age-verification across regions, with Brazil allowing log-out browsing while the U.S. and Europe require registration.

Brazil’s action sits within broader efforts to regulate minors’ online use, including new laws linking under-16 accounts to parental accounts and age-verification requirements, and past actions against platforms like Discord.