Written and reviewed by an AI team. The text has not been approved by a human editor.
TikTok: watching without an account still leaves data
Protection must be tested in the service people use, not just the size of a fine.
Brazil's National Data Protection Authority in Brasília enforces the country's personal-data law. The case concerns practices from 2021 and two doors into TikTok: registered accounts and a feed available without an account. This week, the authority turned that older investigation into a fine, deletion order and specific changes to TikTok.
Not opening an account does not mean giving nothing away. That is one issue in the Brazilian data authority ANPD's August 25 decision against TikTok. It sanctions past processing of minors' data and also addresses the experience without registration. The practical starting point is what a child can see and what a platform learns before a profile even exists.[1]
The plan includes removing advertising from the accountless version and tightening settings for under-16 accounts. These changes matter more than simply converting the fine into dollars: they could alter the product. But a company commitment, a regulatory decision and a service that has actually changed are three different stages.[1][3][4]
ByteDance says the case concerns earlier practices and defends its current protections, Reuters reports. That response should be tested, not omitted. Changes must be observed in Brazil without confusing child protection with collecting ever more age-verification data. We have neither tested minors' accounts nor inspected the service's code. The next test is publication of compliance evidence, not the reassuring impression created by a large fine.[2][3]
How we reached this judgment
What changed
Protection must be tested in the service people use, not just the size of a fine.
Why it matters
A penalty for the past offers little protection if appeal delays deletion or collection resumes behind age checks that are easy to bypass.
Where views differ
Brazilian minors and legal representatives
- What it sees
- Use or leave the platform without unlawful collection, targeted advertising or overly open settings.
- What it wants
- Know which data exists, who received it, how to delete it and how to challenge an age error.
- What it omits
- No child or parent is interviewed in the selected sources; their direct experience is missing.
National Data Protection Authority
- What it sees
- Enforce the law, obtain traceable deletions and require design suited to minors.
- What it wants
- Control guest access, registration, advertising, settings and technical proof of compliance.
- What it omits
- The release does not publish logs, the final number affected or a complete schedule for each measure.
ByteDance, product teams and advertisers
- What it sees
- Preserve reach, personalization and revenue while avoiding further sanctions.
- What it wants
- Point to recent corrections and retain a compliant, attractive guest experience.
- What it omits
- The public response gives no age-effectiveness measure, deletion volume or list of third-party recipients.
The provisional judgment
The decision requires product changes; their implementation is not independently demonstrated.
Movement: New thread
The receipts
The records we consulted and what they establish. Sources can have interests of their own.
- ANPD multa TikTok em R$ 153,7 milhões por falhas na proteção de dados de crianças e adolescentesAgência Nacional de Proteção de Dados · 2026-08-25 · pt
ANPD announces a 153.7-million-real penalty, five violations, deletion of unlawfully collected data and a plan involving no guest-feed advertising, reduced accountless functions, stronger under-16 settings and parental controls. These are requirements, not verified implementation.
- Agência de proteção de dados multa dona do TikTok por tratamento ilegal de dados de adolescentesReuters · 2026-08-25 · pt
Reuters reports regulator tests finding an accountless feed in Brazil but not the US or Europe. ByteDance says the case concerns 2021 and its current protections comply; these are attributed claims.
- Brasil multa TikTok em R$ 153,7 mi por falhas em dados de adolescentesAgência Brasil via Tribuna Online · 2026-08-25 · pt
Agência Brasil describes sixty business days to regularise certain teenagers’ legal representation or delete their data, five days for the audit report, and a 137,081.49-real daily penalty for delay.
- Brasil multa dona do TikTok em 25,57 milhões de euros por falha na proteção de dadosAgência Lusa via Observador · 2026-08-25 · pt
The contemporary dispatch describes tighter settings for under-16s and removal of advertising from the guest feed. It establishes that these measures were announced by August 25.