The recent $400 million settlement between TikTok and the U.S. Department of Justice marks a significant resolution in an extended dispute over children’s privacy concerns. The agreement brings to a close allegations that TikTok and its parent company, ByteDance, collected personal data from children under 13 without obtaining requisite parental consent, contravening the Children’s Online Privacy Protection Act (COPPA). According to the DOJ’s announcement, TikTok will make an immediate $300 million payment, with a subsequent $100 million contingent upon a separate court order.
The litigation, initiated in the Central District of California in August 2024, asserted that TikTok and ByteDance enabled young users to create accounts without parental awareness, systematically collecting personal data, which included names and email addresses, with insufficient oversight over deletion requests. Allegations further implicated the platforms in breach of earlier commitments, sparked by a 2019 consent decree against TikTok’s predecessor, Musical.ly.
Reflecting on past enforcement actions, the Federal Trade Commission (FTC) had originally penalized Musical.ly in a $5.7 million settlement — a record civil penalty for children’s privacy violations at that time. Notably, then-FTC Chair Joe Simon criticized Musical.ly for knowingly allowing non-compliant data practices involving minors. The recent decision underscores the ongoing scrutiny over tech firms’ handling of young users’ data.
This settlement arrives in a context of upheaval for TikTok, entwined with broader geopolitical tensions. Following a 2025 Executive Order by President Donald Trump, TikTok divested its U.S. operations to a coalition of American and Emirati investors, including Oracle and Silver Lake, in an effort to allay national security concerns. While this restructuring aimed to reestablish trust, the protracted legal battles over data compliance have continued to spotlight challenges in tech governance.
In juxtaposing TikTok’s situation, Meta is concurrently defending against allegations of similar privacy infringements. This wide-reaching federal litigation claims that Meta has compromised millions of children’s privacy without parental authorization, further displaying the sector-wide challenges in adhering to data protection laws.
Despite the significant settlement, TikTok has maintained a non-admission stance, denying any wrongdoing and emphasizing that many claims concerned outdated practices. This outcome reveals the complex nature of data privacy management in the tech industry, highlighting the persistent legislative and regulatory focus on protecting children’s digital rights.