TikTok Pays $400M in Child Privacy Case

The U.S. Department of Justice has secured a $400 million settlement from TikTok and its parent company ByteDance over allegations that the social media platform violated federal child privacy laws. The agreement, announced on Friday, brings a partial close to a legal battle that began with a government complaint in August 2024, but it stops short of any admission of wrongdoing by the company.

A Settlement with Staged Payments

According to the DoJ's press release, the settlement requires TikTok to pay $300 million immediately. An additional $100 million will be paid "upon entry of an order vacating a prior consent decree entered against TikTok’s predecessor, Musical.ly." The structure ties part of the payment to the formal dissolution of an earlier regulatory agreement.

The case centered on accusations that TikTok knowingly allowed children under 13 to create accounts, in violation of the Children's Online Privacy Protection Act (COPPA). The complaint, filed jointly with the Federal Trade Commission, alleged the company unlawfully collected data from children who used a feature called "Kids Mode."

Massive-Scale Invasions Alleged

The government's filing accused TikTok of "massive-scale invasions of children's privacy" and of failing to "comply with parents' requests to delete their children's accounts and information." These allegations formed the core of the enforcement action, which sought to hold the platform accountable for its data practices involving minors.

TikTok disputed the claims at the time, saying that many of them related to "past events and practices" that were either "factually inaccurate or have been addressed." The company has not admitted liability as part of the settlement.

One of the Largest COPPA Recoveries

The DoJ characterized the settlement as "one of the largest recoveries ever" obtained in connection with U.S. federal child privacy law. The case marks a significant financial penalty under COPPA, which has historically seen smaller fines.

While the settlement resolves the federal lawsuit, it does not end scrutiny of TikTok's practices. The company has faced regulatory actions in other jurisdictions over similar concerns.

Recent Safeguard Improvements

The DoJ noted that TikTok has since implemented extensive measures to improve safeguards for younger users, strengthen age-related controls, and improve parental oversight. These steps were acknowledged in the settlement announcement, though the department did not provide specific details about the changes.

The improvements come amid ongoing pressure on the platform to demonstrate compliance with child safety requirements, both in the U.S. and abroad.

"This settlement is a major victory for American children and parents. The Department's priority is ensuring that children are protected online and that companies entrusted with their personal information meet their legal obligations. This resolution secures a substantial recovery while reinforcing the protections that families expect and deserve."

— Stanley E. Woodward Jr., Associate Attorney General

Prior Fines and Ongoing Oversight

This is not the first time TikTok has faced penalties over child data privacy. In September 2023, the company was levied a €345 million fine for violating the European Union's General Data Protection Regulation (GDPR) in connection with its processing of children's personal data.

Earlier this year, a U.S. joint venture allowed TikTok to continue operating in the country without a ban, in accordance with a divest-or-ban law upheld by the Supreme Court. That arrangement did not shield the company from this civil enforcement action.

Key Numbers in the Settlement

• $400 million: total settlement amount
• $300 million: immediate payment due
• $100 million: deferred payment tied to vacating the Musical.ly consent decree
• €345 million: fine levied by the EU in 2023

What This Means for Families and Platforms

The settlement signals that federal regulators are willing to pursue substantial financial penalties when platforms mishandle children's data. For parents, it reinforces that companies subject to COPPA face real consequences for non-compliance, even when they dispute the underlying allegations.

For the broader tech industry, the case suggests that child privacy enforcement is not limited to small fines or wrist slaps. The size of this recovery could influence how platforms design age-gating measures, parental controls, and data collection practices for minors. While the settlement avoids a trial, the financial hit and the public acknowledgment of the need for safeguards may push other companies to review their own compliance programs.