On December 16, 2024, Brazil’s National Data Protection Authority (ANPD) ordered X Corp to suspend, within five business days, the use of personal data belonging to individuals under 18 years old for training generative artificial intelligence. The company must also include clear information about this restriction in its Privacy Policy or the “Help Center” section and disable the option to share data for this purpose in accounts belonging to minors.
Additionally, within ten business days, X Corp must clarify the applicability of regulatory documents, such as the Legitimate Interest Assessment (LIA) and the Data Protection Impact Assessment (DPIA), to Brazil or provide country-specific versions. The company is also required to review its Terms of Use, removing vague expressions and clearly defining the purposes for processing personal data.
The full decision can be accessed here: ANPD Decision.