Sunita Somvanshi
The US Department of Justice announced Friday a $400 million settlement with TikTok and its parent company ByteDance to resolve allegations that the social media platform violated federal children’s privacy laws. The settlement marks one of the largest recoveries ever obtained under the Children’s Online Privacy Protection Act (COPPA).
The case stems from a 2024 lawsuit challenging TikTok’s practices in collecting user data. According to the settlement agreement, TikTok and ByteDance collected “vast amounts of data” from millions of users under the age of 13 without proper parental consent. The violations also involve Musical.ly, the video platform that ByteDance acquired and later merged into TikTok.
COPPA, enacted in 2000, is a federal law that protects children’s privacy online. It requires websites and apps that target children or knowingly collect data from children under 13 to obtain parental consent before gathering personal information. The law sets standards for how companies must handle children’s data and limits how they can use it for advertising and marketing purposes.
The settlement breaks down into two payments. TikTok and ByteDance will pay $300 million immediately, with an additional $100 million due after a consent decree in the case is vacated. The consent decree is a court order that requires the company to follow specific rules going forward.
Assistant Attorney General Brett Shumate commented on the enforcement action, stating that “Children and parents are better protected today than they were when this case began.” The settlement requires TikTok to implement significant changes to how it collects, uses, and stores data from younger users. This follows growing scrutiny of technology companies and their data practices. Similar concerns have been raised about social media platforms at GigaNectar and NewsPandit.
This is not the first time ByteDance has faced penalties for children’s privacy violations. In 2019, Musical.ly paid a $5.7 million fine for similar conduct. That case also involved improperly collecting data from users under 13 without parental consent.
In recent years, TikTok has undergone substantial changes to its ownership structure, management, compliance functions, and privacy practices. The platform has implemented new age verification tools and created a separate experience for younger users with restricted features.
The enforcement action against TikTok comes as federal regulators intensify scrutiny of social media platforms’ handling of children’s data. This week, Meta faces a trial brought by 29 US states alleging not only improper data collection and use from minors under COPPA, but also claims of addictive platform design and adverse mental health effects on young users. Facebook and Instagram are central to the allegations. The outcome could reshape how privacy is handled across the industry. Analysis of these developments continues at outlets covering CruxBuzz.
The settlement reflects growing concern among lawmakers, regulators, and child safety advocates about how major social media companies handle young users’ personal information. Privacy violations can expose children to targeted advertising, data breaches, and other harms. Other platforms including social media apps face similar investigations.
The case also underscores the federal government’s efforts to enforce COPPA, which has been the primary tool for protecting children’s privacy online for more than two decades. Companies that violate the law face significant financial penalties and are required to make operational changes. The GameTribune has covered how gaming platforms face similar scrutiny.
The TikTok settlement is expected to send a message to other technology companies about compliance with federal privacy standards for children. Regulators have indicated they intend to continue investigating and pursuing enforcement actions against platforms that fail to protect young users’ data.
