TikTok to Pay $400 Million to Settle US Child Privacy Lawsuit
The US Department of Justice announced on August 21, 2026 that TikTok and its parent company ByteDance will pay $400 million to settle a lawsuit filed in 2024 over alleged violations of the Children's Online Privacy Protection Act, commonly known as COPPA. COPPA is a federal law that requires online services to get verifiable parental consent before collecting personal data from children under 13. The DOJ described the recovery as one of the largest ever obtained in a COPPA case (The Verge, Justice Department).
The lawsuit alleged that TikTok collected data from children under 13 without notifying parents or obtaining verifiable parental consent, as COPPA requires. The DOJ further alleged that TikTok failed to delete children's accounts when parents requested their removal (The Verge).
The $400 million will be paid in two parts. TikTok is set to pay $300 million immediately, with a further $100 million due upon entry of an order vacating a prior consent decree — a legally binding agreement — entered against TikTok's predecessor, Musical.ly. That earlier decree was itself a COPPA enforcement action, meaning the new settlement effectively replaces the Musical.ly-era obligations before the FTC and now resolves the DOJ's subsequent litigation (Justice Department).
The settlement resolves children's privacy litigation involving both TikTok and ByteDance as named parties, closing a case that Reuters reported in May 2026 was nearing resolution when the outlet disclosed the $400 million figure (Reuters).
The DOJ noted that TikTok has undergone significant changes to its ownership, management, compliance functions, and privacy practices since the lawsuit was filed. According to the agency, the company has implemented extensive measures to strengthen safeguards for younger users, improve age-related controls, and enhance parental oversight tools (Justice Department).
The DOJ's acknowledgment of those internal changes is worth noting. Federal enforcement actions under COPPA typically pair financial penalties with binding compliance obligations, and the agency's explicit recognition of remediation steps suggests the settlement terms build on measures TikTok has already deployed rather than prescribing an entirely new compliance framework from scratch. The two-part payment structure, tied to vacating the Musical.ly consent decree, further indicates the resolution is designed to consolidate overlapping regulatory obligations under a single enforcement instrument.
The $400 million figure places this settlement well beyond typical COPPA penalties. The FTC's 2019 action against TikTok (then operating under Musical.ly) resulted in a $5.7 million penalty. The new settlement, pursued by the DOJ rather than the FTC, reflects a coordinated federal posture toward child-privacy enforcement at a scale roughly ten times larger than the previous action. For privacy and compliance professionals, the message is that COPPA enforcement has moved from a regulatory speed bump to a material financial risk, particularly for platforms whose user bases skew young.
The timing also matters. TikTok remains subject to ongoing scrutiny over its data practices and national-security implications under separate federal proceedings. A COPPA settlement does not directly resolve those broader questions, but it removes one litigation front and establishes a documented baseline of remediation the company can reference in other regulatory and legislative contexts.
For platform engineers and trust-and-safety teams, the operational details the DOJ highlighted are familiar terrain: age-gating mechanisms, parental consent verification flows, and account-deletion request handling. The allegations that TikTok collected children's data without parental notice and failed to act on deletion requests point to failures in exactly the systems that COPPA compliance programs are built around. The DOJ's subsequent acknowledgment that TikTok has strengthened these controls suggests the gap between allegation and remediation has been closed, at least to the agency's satisfaction.
What this settlement enables, in practical terms, is a clearer compliance posture for TikTok going forward. The vacatur of the Musical.ly consent decree consolidates legacy obligations, and the DOJ's recognition of implemented safeguards provides a degree of regulatory certainty the company has not had since the original 2019 FTC action. Whether that certainty extends to the parallel national-security and data-governance proceedings TikTok faces is a separate question that this settlement does not address.
