TikTok to Pay $400 Million to Settle U.S. Children's Privacy Case
TikTok and its parent company ByteDance have agreed to a $400 million settlement with the U.S. Department of Justice, resolving allegations that the platform violated federal children's online privacy laws. The settlement, first reported by Axios and confirmed by Reuters and TechCrunch on August 21, 2026, closes a case that began with a DOJ lawsuit filed in 2024 under the Biden administration (TechCrunch).
The DOJ alleged that TikTok allowed millions of children under 13 to use the platform and collected their personal information without obtaining the parental consent required under the Children's Online Privacy Protection Act, commonly known as COPPA. COPPA is a federal law that requires websites and online services directed at children under 13 to notify parents and obtain verifiable consent before collecting or using children's data (FTC).
Beyond the $400 million payment, the settlement includes measures to strengthen protections for young users: stronger age-related controls, additional safeguards for children, and enhanced parental oversight. TikTok and ByteDance are not required to admit wrongdoing under the terms of the agreement (TechCrunch).
The DOJ's case followed an FTC investigation that led to a lawsuit filed on August 2, 2024. The FTC's complaint alleged that TikTok and ByteDance "flagrantly" violated children's privacy law by failing to comply with COPPA's requirement to notify and obtain parental consent before collecting and using children's information (FTC). The FTC's case record states that the companies violated a 2019 consent order, a legally binding agreement that was itself the product of an earlier COPPA settlement (FTC).
That 2019 consent order traces back to Musical.ly, TikTok's predecessor, which agreed to pay $5.7 million to settle COPPA violation allegations and committed to steps preventing children under 13 from creating accounts. The 2024 DOJ complaint alleged that TikTok not only continued to struggle with identifying and removing underage users but had also changed aspects of its registration policies in ways that made it more difficult to determine whether users were old enough to join the service. The complaint further alleged that TikTok maintained and used children's information, including data for targeted advertising, despite employee concerns about young users on the platform (TechCrunch).
The settlement lands amid a turbulent stretch for TikTok on the U.S. regulatory and legal fronts. Days before the announcement, Bloomberg reported that TikTok had intentionally disabled an algorithmic safeguard for roughly 10% of U.S. users as part of an experiment designed to reduce exposure to harmful content. Republican Senator Marsha Blackburn of Tennessee and Democratic Senator Richard Blumenthal of Connecticut sent a letter to TikTok CEO Shou Chew and U.S. business chief executive Adam Presser questioning the decision to disable the safeguard (TechCrunch; Bloomberg).
Earlier in August, TikTok also agreed to settle three lawsuits brought by young people who accused social media companies of designing their platforms to be addictive. Those settlements came ahead of trial (Reuters). The platform separately faced a claim for billions in a London child-privacy lawsuit, in which the claimant alleged that every child who used TikTok since May 25, 2018 may have had private personal information illegally collected (Reuters.
The COPPA settlement also exists alongside the broader divestiture fight. TikTok has challenged a law passed in April 2024 that requires ByteDance to divest TikTok's U.S. assets by January 19 or face a ban (Reuters).
Two things stand out about the pattern here. The first is the sheer gap between the 2019 Musical.ly penalty ($5.7 million) and this settlement ($400 million). A roughly 70-fold increase reflects not just inflation or corporate revenue growth but a clear regulatory escalation: when a company is found to have violated a consent order, the consequences scale aggressively. The FTC's use of the word "flagrant" in its 2024 complaint signaled that regulators viewed the subsequent conduct as a knowing breach rather than a technical shortfall.
The second is the structural tension the complaint exposes between age-gating and growth. Age-gating refers to the practice of restricting access based on a user's age, typically through self-reported birthdates at registration. The allegation that TikTok altered registration policies in ways that made it harder to determine user age is, if accurate, the kind of design decision that sits at the intersection of product management and legal compliance. Age-verification mechanisms that are trivial to circumvent functionally serve as liability shields rather than access controls. The settlement's mandated remediation measures — stronger age-related controls, enhanced parental oversight — suggest regulators intend to force a higher bar than self-regulation has produced.
For platforms operating at TikTok's scale, the broader context here is a message that has been building across the children's-privacy enforcement landscape for years: a consent order is not a closed chapter. It is an ongoing obligation, and subsequent violations carry consequences that dwarf the original penalty. Whether the remediation terms in this settlement produce meaningfully different outcomes for underage users will depend on enforcement rigor and whether the structural incentives that make weak age-gating attractive to platforms have genuinely shifted.
