TikTok: $400 million settlement for violating children's privacy

TikTok has agreed to pay $400 million to settle a lawsuit alleging violations of children's privacy in the United States. It is one of the largest settlements ever reached under the US Children's Online Privacy Protection Act. The US Department of Justice (DoJ) announced on Friday that TikTok's parent company ByteDance has accepted the terms of a settlement that resolves a 2024 lawsuit alleging violations of the Children's Online Privacy Protection Act ( COPPA ). The case is a landmark case for protecting minors online and sends a strong message to all major social media platforms.

Under the terms of the settlement, TikTok will pay $300 million upfront, with the remaining $100 million to be paid once a court order is issued that overturns a previous consent decree imposed on the platform’s predecessor, Musical.ly. The DoJ called the settlement “one of the largest recoveries ever” under the federal Children’s Privacy Act. It’s worth noting that a similar 2019 involving Musical.ly resulted in a fine of just $5.7 million — a huge difference that reflects the growing severity of regulators’ stance on children’s privacy violations.

See also: Snap settles social media addiction case after TikTok

The complaint, filed in August 2024 jointly with the Federal Trade Commission (FTC) , accused the company of “massive violations of children’s privacy.” Specifically, TikTok was accused of knowingly allowing children under 13 to create regular accounts and interact with adult users, while the platform collected personal data — including email addresses and other identifiers — without valid parental consent. In addition, the complaint said the company collected data from children using the “Kids Mode”, in violation of the express provisions of COPPA.

TikTok and COPPA: What the law provides for the protection of children

COPPA is the cornerstone of U.S. online child protection law. It requires companies to obtain parental consent before collecting, using, or sharing personal information from children under 13. The allegations against TikTok included weaknesses in its age -gating systems , inadequate parental controls, and failure to comply with parents’ requests to delete their children’s accounts and data. The company initially disputed many of the allegations, arguing that they related to “past practices” that were either “inaccurate” or “had already been addressed.”

The DoJ acknowledged that TikTok has implemented extensive remedial measures since the filing of the lawsuit in 2024, which “substantially advanced” the public interest underlying the case. These include enhanced age verifications, additional safeguards for young users, and improved parental oversight. “This settlement is a major victory for children and their parents in the United States,” said Stanley E. Woodward Jr., Deputy Attorney General. “The Department’s priority is to ensure that children are protected online and that the companies they trust with their personal data meet their legal obligations.”

TikTok: History of violations and regulatory pressures worldwide

This case is not the first time TikTok has come under scrutiny from regulators over children’s privacy. In September 2023, the platform was fined €345 million by European authorities for violating the General Data Protection Regulation (GDPR) in relation to the processing of children’s personal data. In July 2026, the European Commission issued preliminary findings that TikTok failed to meet its protection under the Digital Services Act (DSA), including concerns about the excessive visibility of minors’ accounts to adults and non-users. This string of regulatory actions highlights a systematic failure by the platform to implement effective child protection measures globally.

See also: Florida sues TikTok over social media law for minors

In the US, TikTok has also faced existential threats to its operations in the country. A law requiring ByteDance to sell the business or exit the US market was upheld by the Supreme Court, but a consortium has allowed the app to continue operating in the US. The $400 million comes at a critical time for the company, which is trying to restore the trust of both users and regulators. According to The Hacker News, the agreement does not constitute an admission of liability on the part of the company — something that is common in large privacy settlements.

What the TikTok deal means for platforms and parents

This agreement is a milestone for the entire social media industry. It highlights that even the largest platforms in the world can face serious financial consequences if they fail to protect the data of their minor users. For parents, this development marks a strengthening of their rights to request the deletion of their children's data and accounts. For companies, it sends a clear message: compliance with COPPA and the corresponding European regulations is not optional.

Experts recommend that platforms strengthen age verification systems, minimize data collection from underage users, and reduce retention periods for records related to children. They also recommend creating explicit, auditable, and difficult-to-bypass parental consent flows, as well as regular reviews of recommendations, messaging, and content sharing features for the safety of minors. Particular care is needed when minors can interact with adult users — one of the accusations against TikTok.

See also: Australia: Meta, TikTok, Snapchat and YouTube fail to comply with social media ban for children

In summary, the $400 million between TikTok and the U.S. Department of Justice sets a strong precedent for enforcing COPPA and protecting children’s privacy online. In a world where children are spending more and more time on digital platforms, regulatory pressure is expected to intensify further — both in the U.S. and Europe. Companies that fail to invest in meaningful child protection measures risk facing similar — or even greater — penalties in the future.