TikTok to pay $400m in landmark child privacy settlement with US

Millions of children under 13 had personal data collected and exploited by TikTok without parental knowledge or consent, potentially exposing minors to privacy violations and targeted profiling.
Children and parents are better protected today than they were when this case began
The Justice Department's assessment of what the $400 million settlement achieves for young users.
Mark

Why does a settlement from 2024 matter so much right now, in 2026?

Mimi

Because it's the first major reckoning for TikTok specifically, and it signals that regulators are serious about enforcing child privacy law against the biggest platforms. The Meta case just started trial this week—this TikTok settlement is the opening move in a much larger confrontation.

Mark

But TikTok has already been restructured. The Chinese parent company doesn't control the US operations anymore. Does the settlement still apply?

Mimi

That's the strange part. The settlement only covers TikTok's China operations, not the newly restructured US business. So in a way, the company is paying for what it did before the divestment, not for ongoing practices here.

Mark

What does "vast amounts of data" actually mean? What were they collecting?

Mimi

The source doesn't specify—no details about what personal information was taken. But the violation was the collection itself without age verification or parental consent. That's the legal injury, regardless of what the data contained.

Mark

Is $400 million a real punishment for a company valued at $550 billion?

Mimi

Mathematically, it's less than one percent of ByteDance's valuation. But it's the largest COPPA settlement ever, and it comes before Meta's case concludes. If Meta loses and pays hundreds of billions, the calculus changes entirely.

Mark

What happens to the children whose data was already collected?

Mimi

The settlement doesn't address that. It's forward-looking—requiring parental consent going forward, implementing better age controls. But the data that was already taken remains taken.

  • For years, millions of children under 13 had their personal data quietly harvested by one of the world's most powerful platforms, with no meaningful age checks and no parental consent standing in the way.
  • The $400 million settlement — dwarfing YouTube's 2019 penalty and Epic Games' 2022 fine — signals that regulators are finally willing to impose consequences with real financial weight.
  • The payment is structured in two tranches: $300 million due immediately, and $100 million contingent on the government formally lifting a prior FTC consent decree, with Musical.ly also required to pay $5.7 million and adopt parental consent protocols.
  • Despite the headline figure, the penalty amounts to a fraction of ByteDance's $550 billion valuation, raising urgent questions about whether financial settlements alone can deter the world's wealthiest tech companies.
  • The real pressure now shifts to Meta, where 29 US states are pursuing penalties that could reach into the hundreds of billions — a trial that may define the next chapter of child privacy enforcement.

In a reckoning that speaks to the enduring tension between technological ambition and the protection of the young, TikTok and its parent company ByteDance have agreed to pay $400 million to the US Department of Justice to settle allegations that they harvested personal data from over 170 million underage users without parental knowledge or consent. The case, rooted in a federal child privacy law enacted at the dawn of the social media age, now stands as one of the largest penalties ever levied for violations against minors online. It arrives at a moment when the broader industry faces a reckoning — with Meta's far larger trial underway — suggesting that the era of unchecked data collection from children may at last be drawing to a close.

TikTok has agreed to pay $400 million to settle a US Department of Justice lawsuit alleging that it and parent company ByteDance systematically collected personal data from children under 13 without age verification or parental consent — a direct violation of the Children's Online Privacy Protection Act, the federal law passed in 2000 to shield minors from exactly this kind of exploitation. When the case was filed in 2024, government attorneys documented that more than 170 million young users were on the platform, which had been deliberately designed to attract them, yet lacked any meaningful mechanism to verify their age or seek parental permission.

Under the settlement terms, $300 million will be transferred to the Justice Department immediately, with an additional $100 million due once the government formally vacates a prior FTC consent decree. Musical.ly, ByteDance's predecessor company, will separately pay $5.7 million and must implement parental consent requirements going forward. Assistant Attorney General Brett Shumate called the outcome a meaningful step forward for child protection.

The $400 million figure places this case among the most significant child privacy penalties in history, surpassing YouTube's $170 million settlement in 2019 and Epic Games' $275 million in 2022. Yet for ByteDance — valued at roughly $550 billion — the sum represents a modest fraction of its overall worth, a disproportion that critics will not overlook.

The settlement arrives amid TikTok's broader corporate transformation. Following years of political pressure, a consortium of investors now owns 81 percent of TikTok's US operations, with ByteDance retaining a 19 percent stake. Notably, the settlement applies only to TikTok's Chinese operations, not its restructured American entity. The Justice Department acknowledged that TikTok has made significant changes to its privacy practices and ownership structure since the lawsuit was filed.

The larger story, however, may be unfolding in a courtroom elsewhere: Meta now faces a jury trial brought by 29 US states over comparable COPPA violations, with potential penalties that could reach into the hundreds of billions — a case that will test just how far regulators are prepared to go in holding the tech industry accountable for the data it has taken from children.

TikTok has agreed to pay $400 million to settle a lawsuit brought by the US Department of Justice, ending one of the most significant legal battles over children's privacy in tech history. The case, filed in 2024 under the Biden administration, alleged that TikTok and its parent company ByteDance had systematically collected vast quantities of personal data from millions of users under the age of 13 without proper verification of their age or consent from their parents.

The violation centers on the Children's Online Privacy Protection Act, a federal law passed in 2000 that explicitly prohibits companies from gathering data on children under 13 without parental permission. When the lawsuit was filed, government attorneys documented that more than 170 million teenagers were using TikTok, and that the platform was deliberately designed to appeal to young users. Yet the company had failed to implement meaningful age-checking mechanisms or to obtain parental consent before collecting information from underage users.

Under the settlement terms, TikTok and ByteDance will immediately transfer $300 million to the Department of Justice. An additional $100 million becomes due once the government formally vacates a 2019 consent decree with the Federal Trade Commission. The agreement also requires Musical.ly, the predecessor company to ByteDance, to pay a separate $5.7 million fine and to implement parental consent requirements for any user under 13 going forward.

Assistant Attorney General Brett Shumate framed the settlement as a victory for child protection, stating that children and parents now have stronger safeguards than existed when the case began. The $400 million figure places this settlement among the largest ever imposed for privacy violations targeting minors. YouTube paid $170 million in 2019 for similar COPPA breaches, and Epic Games paid $275 million in 2022. Those penalties, however, pale in comparison to what Meta may soon face: 29 US states have launched a lawsuit against the Facebook and Instagram owner alleging comparable violations, with a jury trial having just begun this week. Attorneys general are seeking penalties that could exceed hundreds of billions of dollars.

The timing of the TikTok settlement is notable given the platform's recent corporate restructuring. In 2024, the Biden administration had pushed for either a complete ban of TikTok or a forced divestment of its US operations from Chinese ownership. President Trump subsequently backed the divestment option, which was completed last year. Today, a consortium of investors owns 81 percent of TikTok's US business, while ByteDance retains a 19 percent stake. The settlement, however, applies only to TikTok's operations in China, not its restructured American entity.

The Justice Department noted in its announcement that since filing the lawsuit, TikTok has made "significant changes" to its ownership structure, privacy practices, and the controls available to young users on the platform. No additional enforcement actions against TikTok were detailed beyond the financial penalty. ByteDance, a privately held company, was most recently valued by investors at $550 billion, making the $400 million settlement a relatively modest fraction of the company's overall worth. TikTok declined to comment on the settlement when contacted by the BBC.

Children and parents are better protected today than they were when this case began
— Brett Shumate, Assistant Attorney General
Vuoi la storia completa? Leggi l'originale su BBC News ↗
Contattaci Domande frequenti