TikTok to pay $400m to US in one of largest child privacy settlements
TikTok has agreed to pay $400m to the US Department of Justice to settle a lawsuit alleging the platform violated children's privacy laws by collecting data on users under 13.
Intelligence analysis by Gemini 2.5 Flash
The settlement, one of the largest of its kind, addresses a 2024 lawsuit claiming TikTok and its parent company ByteDance collected vast amounts of data from underage users without parental consent, in violation of the Children's Online Privacy Protection Act (COPPA). This action comes as other tech giants, including Meta, face similar legal challenges over child privacy.
Imagine a playground where kids under 13 aren't supposed to play without a grown-up watching, but the playground owners let them in anyway and even collected their names and addresses without asking their parents. That's kind of what TikTok did, according to the US government. Now, TikTok has to pay a huge fine, $400 million, to say sorry and promise to be much better at making sure only older kids or kids with parent permission use their app, so everyone stays safe online.
Analysis
The recent agreement for TikTok to pay $400 million to the US Department of Justice marks a significant moment in the ongoing battle over child online privacy. This settlement stems from a 2024 lawsuit initiated under former President Joe Biden, which accused TikTok and its parent company, ByteDance, of illegally collecting extensive data from millions of users under the age of 13. The core of the complaint rested on violations of the Children's Online Privacy Protection Act (COPPA), a federal law designed to safeguard the privacy of children online. This case is particularly notable given its substantial financial penalty, placing it among the largest settlements ever reached concerning child privacy infringements by a technology company. The implications extend beyond TikTok, signaling a broader governmental push to enforce stricter data protection standards for young users across the digital landscape.
Children's Online Privacy Protection Act
The Children's Online Privacy Protection Act (COPPA), enacted in 2000, serves as the foundational federal law governing the online collection of personal information from children under 13. The lawsuit against TikTok specifically alleged that the platform failed to effectively gauge user age and obtain parental consent for underage users, despite the app being 'directed to children' and having over 170 million teenage users at the time the suit was filed. This legal framework has been a recurring instrument for US authorities to hold tech companies accountable, with precedents including Google's YouTube paying $170 million in 2019 and Epic Games settling for $275 million in 2022 for similar COPPA violations. The ongoing legal challenges against Meta, which could result in penalties exceeding hundreds of billions of dollars from 29 US states, further illustrate the widespread application and increasing enforcement of COPPA.
ByteDance
ByteDance, the privately held parent company of TikTok, was most recently valued by investors at $550 billion. The settlement terms stipulate an immediate payment of $300 million to the Department of Justice, with an additional $100 million due upon the government vacating a 2019 consent decree with the Federal Trade Commission. This earlier decree had required ByteDance's predecessor, Musical.ly, to pay a $5.7 million fine for COPPA violations and ensure parental consent for users under 13. While the lawsuit predates the 2025 split of TikTok's US operations from its original base in China, the settlement specifically addresses TikTok's operations in China. The Department of Justice noted that since the lawsuit, TikTok has undergone significant changes in ownership, privacy practices, and platform controls for young users, with its US operations now 81% owned by a consortium of investors, leaving ByteDance with a 19% stake.
Brett Shumate
Assistant Attorney General Brett Shumate emphasized the positive outcome of the case, stating, "Children and parents are better protected today than they were when this case began." This statement highlights the Department of Justice's view that the legal action has led to tangible improvements in child safety online. The government's intervention, spurred by concerns from both the Biden and Trump administrations regarding TikTok's operations and data handling, underscores a bipartisan commitment to regulating foreign-owned tech platforms operating within the US. The settlement, therefore, is not merely a financial penalty but a signal of the government's intent to compel significant operational and policy changes from major technology companies to safeguard vulnerable user populations.
Key points
- TikTok will pay $400 million to the US Department of Justice to settle a child privacy lawsuit.
- The lawsuit alleged TikTok violated the Children's Online Privacy Protection Act (COPPA) by collecting data from users under 13 without parental consent.
- This is one of the largest child privacy settlements, following similar fines for Google's YouTube and Epic Games.
- The settlement involves TikTok's operations in China, despite its US business having split from ByteDance.
- Meta is currently facing similar lawsuits from 29 US states over alleged COPPA violations, with potential penalties in the hundreds of billions.
This substantial settlement could serve as a powerful deterrent for other tech companies, prompting them to proactively enhance their age verification processes and strengthen child privacy protections. It may lead to a broader industry shift towards more responsible data collection practices for minors, fostering a safer online environment for children.
Despite the large fine, some companies might view such settlements as a cost of doing business, potentially not leading to fundamental changes in their core data collection models. The article also notes Meta is facing potentially 'hundreds of billions of dollars' in penalties, suggesting that even massive fines may not fully resolve the systemic issues of child data privacy violations.
