TikTok to Pay $400 Million in Landmark U.S. Children's Privacy Settlement

WASHINGTON D.C. — TikTok and its parent company, ByteDance, have agreed to a $400 million settlement with the U.S. Department of Justice (DOJ) to resolve allegations that the popular video-sharing platform violated federal children's online privacy laws. Announced Friday, August 21, 2026, this significant agreement concludes a lawsuit filed by the Justice Department in 2024, marking one of the largest recoveries ever obtained in a case related to the Children's Online Privacy Protection Act (COPPA). The settlement underscores a growing commitment by U.S. authorities to enforce digital privacy safeguards for minors and holds major online platforms accountable for their data collection practices.

Landmark Agreement Addresses Widespread Privacy Concerns

The $400 million settlement addresses allegations that TikTok illegally collected and retained personal information from children under the age of 13 without obtaining verifiable parental consent. Under the terms, TikTok will make an immediate payment of $300 million to the U.S. government. An additional $100 million will be paid upon the vacating of a prior consent decree from 2019, which stemmed from similar privacy violations involving TikTok's predecessor, Musical.ly. This resolution, spearheaded by the Justice Department on referral from the Federal Trade Commission (FTC), highlights the severe repercussions for companies found to be in breach of federal privacy statutes designed to protect young online users.

The Justice Department characterized the settlement as a major victory for American children and parents, emphasizing the government's priority in ensuring children's online protection and holding companies responsible for their legal obligations regarding personal information. While TikTok did not admit wrongdoing as part of the agreement, the company has reportedly undergone substantial changes to its ownership, management, compliance functions, and privacy practices since the lawsuit was initiated.

A History of Alleged COPPA Violations

The core of the DOJ's lawsuit revolved around TikTok's alleged non-compliance with the Children's Online Privacy Protection Act (COPPA), a federal law mandating parental consent before collecting personal data from children under 13. The Justice Department, in conjunction with the FTC, accused TikTok and ByteDance of knowingly allowing children under the age of 13 to create regular TikTok accounts, bypassing age restrictions intended for users 13 and older. These accounts, typically requiring users to be at least 13, allowed minors to post and share videos and message with adults.

Furthermore, the complaint alleged that TikTok collected a wide variety of personal information from these underage users without proper notification to or consent from their parents. Even accounts designated for a "Kids Mode," purportedly designed for users under 13, were found to have gathered personal information such as email addresses. Federal officials also claimed that TikTok frequently failed to comply with parental requests to delete their children's data, further exacerbating the privacy breaches.

This is not TikTok's first encounter with children's privacy regulations. In 2019, the FTC settled with Musical.ly, then owned by ByteDance, for $5.7 million over similar COPPA violations. The 2019 agreement imposed specific requirements to ensure future compliance. However, the DOJ's 2024 lawsuit alleged that these problems persisted after Musical.ly merged into TikTok, indicating a continued pattern of non-compliance.

Understanding the Children's Online Privacy Protection Act (COPPA)

The Children's Online Privacy Protection Act (COPPA), enacted by Congress in 1998 and taking effect in 2000, is a foundational piece of U.S. legislation aimed at safeguarding the online privacy of children. It grants the Federal Trade Commission (FTC) the authority to create and enforce regulations concerning the collection of personal information from children under 13 by operators of commercial websites and online services.

COPPA applies to online entities that are either directed at children under 13 and collect personal data, or those that have actual knowledge they are collecting information from children under 13, regardless of their general audience. Key requirements of COPPA include obtaining verifiable parental consent before collecting, using, or disclosing children's personal information, posting clear privacy policies, and providing parents with the ability to review or request the deletion of their child's data. The law defines "personal information" broadly to include names, addresses, email addresses, telephone numbers, and any other identifier that allows for the physical or online contact of an individual.

TikTok's Evolving Privacy Posture

Since the Justice Department filed its complaint in 2024, TikTok has reportedly undertaken significant internal reforms and changes to its operational structure. The company has implemented extensive measures aimed at strengthening safeguards for younger users, improving age-related controls, and enhancing parental oversight functions within the application. These developments have been recognized by the Justice Department as materially advancing the public interest by strengthening protections for millions of American families.

Notably, earlier this year, ByteDance agreed to establish a majority U.S.-owned joint venture for TikTok's American operations. This restructuring aimed to secure domestic user data and address long-standing concerns regarding the platform's ties to its Chinese parent company, potentially averting a broader U.S. ban. The Department of Justice views the settlement as a reflection of its commitment to achieving practical results that protect the public, securing a substantial financial recovery while acknowledging the compliance improvements already in place.

Broader Implications for Digital Platforms and Child Safety

The $400 million settlement serves as a potent reminder to all online platforms of the serious legal and financial consequences of failing to protect children's privacy. It reinforces the expectation that companies collecting data from users in the U.S. must adhere strictly to COPPA's mandates. The magnitude of this settlement, one of the largest in COPPA's history, signals an intensified regulatory environment where authorities are prepared to pursue aggressive enforcement actions.

This resolution contributes to a broader trend of increased scrutiny on how digital services interact with younger users. With the ongoing evolution of online platforms and the pervasive presence of social media in children's lives, the legal landscape surrounding digital child protection continues to adapt. The TikTok settlement is likely to encourage other tech companies to review and bolster their own privacy practices and age-verification mechanisms, ensuring robust compliance with children's online privacy laws to avoid similar enforcement actions. The outcome emphasizes that prioritizing children's safety and privacy online is not merely a corporate responsibility, but a legal imperative with significant ramifications.