Technology

TikTok Agrees to Pay $400 Million Over Children's Privacy Charges

Martin HollowayPublished 2month ago4 min readBased on 4 sources
Reading level
TikTok Agrees to Pay $400 Million Over Children's Privacy Charges
source:justice.gov

The US Department of Justice announced on August 21, 2026 that TikTok and its parent company ByteDance will pay $400 million to settle a lawsuit filed in 2024. The lawsuit claimed TikTok broke a federal law called COPPA, which stands for the Children's Online Privacy Protection Act. That law says websites and apps must get a parent's permission before collecting personal information from children under 13. The DOJ described the recovery as one of the largest ever obtained in a COPPA case (The Verge, Justice Department).

The lawsuit alleged that TikTok collected data from children under 13 without notifying parents or getting their permission, as COPPA requires. The DOJ also alleged that TikTok failed to delete children's accounts when parents asked for them to be removed (The Verge).

The $400 million will be paid in two parts. TikTok is set to pay $300 million immediately, with another $100 million due when a court officially cancels an older agreement involving TikTok's predecessor, an app called Musical.ly. That earlier agreement was also a COPPA enforcement action. The new settlement effectively replaces those older obligations and resolves the DOJ's lawsuit (Justice Department).

The settlement resolves children's privacy litigation involving both TikTok and ByteDance as named parties, closing a case that Reuters reported in May 2026 was nearing resolution when the outlet disclosed the $400 million figure (Reuters).

The DOJ noted that TikTok has made significant changes to its ownership, management, and privacy practices since the lawsuit was filed. According to the agency, the company has implemented extensive measures to strengthen safeguards for younger users, improve age-related controls, and enhance parental oversight tools (Justice Department).

The broader context here is that the DOJ's acknowledgment of those internal changes carries real weight. Federal enforcement actions under COPPA typically pair financial penalties with binding compliance obligations. The agency's explicit recognition of the steps TikTok has already taken suggests the settlement builds on measures TikTok had already put in place, rather than requiring the company to start from scratch. The two-part payment structure, tied to canceling the older Musical.ly agreement, further indicates the resolution is designed to fold overlapping regulatory requirements into a single, cleaner enforcement action.

The $400 million figure places this settlement well beyond typical COPPA penalties. The FTC's 2019 action against TikTok, then operating as Musical.ly, resulted in a $5.7 million penalty. The new settlement, pursued by the DOJ rather than the FTC, reflects a coordinated federal approach to child-privacy enforcement at a scale roughly ten times larger than the previous action. For anyone working in privacy or compliance, the practical takeaway is that COPPA enforcement has grown from a relatively minor regulatory concern into a serious financial risk, particularly for platforms whose users tend to be young.

The timing also matters. TikTok remains under separate federal scrutiny over its data practices and national-security concerns. A COPPA settlement does not directly resolve those broader questions, but it removes one legal battle and gives the company a documented record of improvements it can point to in other regulatory and legislative settings.

The operational details the DOJ highlighted will sound familiar to anyone who builds or manages online platforms: systems that check a user's age, processes for verifying parental consent, and procedures for handling account-deletion requests. The allegations that TikTok collected children's data without parental notice and failed to act on deletion requests point to breakdowns in exactly the systems that COPPA compliance is designed to address. The DOJ's subsequent acknowledgment that TikTok has strengthened these controls suggests the gap between what was alleged and what the company now does has been closed, at least to the agency's satisfaction.

What this settlement enables, in practical terms, is a clearer compliance posture for TikTok going forward. Canceling the older Musical.ly agreement consolidates legacy obligations, and the DOJ's recognition of implemented safeguards provides a degree of regulatory certainty the company has not had since the original 2019 FTC action. Whether that certainty extends to the parallel national-security and data-governance proceedings TikTok faces is a separate question that this settlement does not address.