TikTok Agrees to Pay $400 Million Over Children's Privacy Violations
TikTok and its parent company ByteDance have agreed to pay $400 million to settle a U.S. government lawsuit accusing the platform of breaking federal children's privacy laws. The settlement was first reported by Axios and confirmed by Reuters and TechCrunch on August 21, 2026. It closes a case that began with a lawsuit filed in 2024 by the Department of Justice under the Biden administration (TechCrunch).
The government alleged that TikTok let millions of children under 13 use the platform and collected their personal information without first getting permission from their parents, as required by a federal law called COPPA, or the Children's Online Privacy Protection Act. COPPA is designed to protect kids online by requiring websites and apps to notify parents and get their approval before collecting or using data from children under 13 (FTC).
Beyond the $400 million payment, the settlement requires TikTok to strengthen protections for young users through stronger age-related controls, additional safeguards for children, and enhanced parental oversight. TikTok and ByteDance do not have to admit they did anything wrong under the agreement (TechCrunch).
The DOJ's case followed an investigation by the Federal Trade Commission, or FTC, which filed its own lawsuit on August 2, 2024. The FTC's complaint accused TikTok and ByteDance of "flagrantly" violating children's privacy law by failing to get parental consent before collecting and using children's information (FTC). The FTC also said the companies violated a 2019 consent order, which is a formal agreement a company signs to settle a case and promises to follow certain rules going forward. That order itself came from an earlier COPPA settlement (FTC).
The 2019 consent order traces back to Musical.ly, the app that became TikTok. Musical.ly agreed to pay $5.7 million to settle COPPA violation claims and promised to take steps preventing children under 13 from creating accounts. The 2024 DOJ complaint alleged that TikTok not only kept struggling to identify and remove underage users but had also changed its registration policies in ways that made it harder to figure out whether users were old enough to join. The complaint further alleged that TikTok kept and used children's information, including for targeted advertising, even though employees had raised concerns about young users on the platform (TechCrunch).
The settlement arrives during a difficult stretch for TikTok on the U.S. legal and regulatory front. Days before the announcement, Bloomberg reported that TikTok had intentionally turned off an algorithmic safeguard for about 10% of U.S. users as part of an experiment aimed at reducing exposure to harmful content. Republican Senator Marsha Blackburn of Tennessee and Democratic Senator Richard Blumenthal of Connecticut sent a letter to TikTok CEO Shou Chew and U.S. business chief executive Adam Presser questioning the decision to disable the safeguard (TechCrunch; Bloomberg).
Earlier in August, TikTok also agreed to settle three lawsuits brought by young people who accused social media companies of designing their platforms to be addictive. Those settlements came ahead of trial (Reuters). The platform separately faces a claim for billions in a London child-privacy lawsuit, in which the claimant alleged that every child who used TikTok since May 25, 2018 may have had private personal information illegally collected (Reuters).
The COPPA settlement also sits alongside the broader divestiture fight. TikTok has challenged a law passed in April 2024 that requires ByteDance to sell off TikTok's U.S. assets by January 19 or face a ban (Reuters).
Two things stand out about the pattern here. The first is the gap between the 2019 Musical.ly penalty ($5.7 million) and this settlement ($400 million). A roughly 70-fold increase reflects not just inflation or corporate revenue growth but a clear regulatory escalation: when a company is found to have violated a consent order, the consequences scale aggressively. The FTC's use of the word "flagrant" in its 2024 complaint signaled that regulators viewed the subsequent conduct as a knowing breach rather than a technical shortfall.
The second is the tension the complaint exposes between age-gating and growth. Age-gating means trying to prevent underage users from accessing a platform, usually by asking for a birthdate when someone signs up. The allegation that TikTok altered registration policies in ways that made it harder to determine user age is, if accurate, the kind of design decision that sits at the intersection of product management and legal compliance. Age-verification systems that are easy to get around effectively function as legal shields rather than real access controls. The settlement's required remediation measures, stronger age-related controls and enhanced parental oversight, suggest regulators intend to force a higher bar than self-regulation has produced.
The broader context here is a message that has been building across the children's-privacy enforcement landscape for years: a consent order is not a closed chapter. It is an ongoing obligation, and subsequent violations carry consequences that dwarf the original penalty. Whether the remediation terms in this settlement produce meaningfully different outcomes for underage users will depend on enforcement rigor and whether the structural incentives that make weak age-gating attractive to platforms have genuinely shifted.
