TikTok and its parent company ByteDance will pay $400 million to resolve a federal lawsuit alleging violations of the Children’s Online Privacy Protection Act (COPPA). The settlement, announced Friday by the U.S. Department of Justice (DOJ), marks one of the largest recoveries under COPPA, a law restricting the collection of personal data from children under 13 without parental consent.
Under the agreement, TikTok will immediately pay $300 million, with an additional $100 million contingent on a federal court vacating a prior consent decree involving Musical.ly, TikTok’s predecessor platform. The companies do not admit fault as part of the settlement terms.
The lawsuit, filed in 2024 in the Central District of California, accused TikTok and ByteDance of illegally gathering children’s personal information. The DOJ’s Civil Division’s Enforcement and Affirmative Litigation Branch inherited the case from the Federal Trade Commission (FTC). Since the filing, TikTok underwent ownership changes and implemented updated privacy safeguards, including improved age controls and parental oversight features for younger users.
DOJ officials emphasized enforcement priorities. Associate Attorney General Stanley E. Woodward Jr. stated the settlement reinforces protections for children online, while Assistant Attorney General Brett A. Shumate highlighted that companies handling children’s data must comply with legal obligations. Neither TikTok nor ByteDance responded to requests for comment.
The settlement resolves allegations that TikTok and ByteDance violated COPPA by collecting personal information from users under 13 without obtaining required parental consent. The $400 million recovery is described by the DOJ as one of the largest ever obtained in a COPPA case, reflecting the federal government’s focus on child privacy enforcement.
Background and Policy Context
The case stems from a 2024 complaint filed by the DOJ, which alleged TikTok and ByteDance failed to adhere to COPPA’s restrictions on data collection from minors. COPPA requires online services directed at children or with actual knowledge of underage users to obtain verifiable parental consent before collecting, using, or disclosing personal information.
Since the lawsuit’s filing, TikTok has introduced enhanced privacy measures, including stricter age verification and default restrictions for younger accounts. The company has also overhauled its compliance and privacy practices under new ownership, though the settlement does not address ongoing scrutiny of TikTok’s broader data security practices or its ties to China.
Legal and Industry Implications
The settlement underscores the federal government’s willingness to pursue significant penalties for violations of child privacy laws. It also signals continued regulatory attention on social media platforms, particularly those with large youth user bases. While the agreement resolves the COPPA allegations, it does not preclude future enforcement actions related to other privacy or security concerns.
The case highlights broader debates over online child safety, including calls for stronger federal regulations and industry-led reforms. Advocacy groups have long pushed for stricter enforcement of COPPA and similar laws, citing risks such as data exploitation, targeted advertising to minors, and exposure to harmful content.
Next Steps
The additional $100 million payment remains contingent on a federal court vacating the 2019 Musical.ly consent decree, which originally addressed similar privacy violations. The DOJ has not provided a timeline for this judicial action, but the settlement terms indicate the payment will be triggered once the decree is formally set aside.
TikTok’s compliance with COPPA and other privacy regulations will continue to be monitored by federal agencies, with the settlement serving as a precedent for future enforcement actions against tech companies handling children’s data.