← All posts / Policy

TikTok Will Pay $400 Million to Settle the DOJ's Children's Privacy Lawsuit

TikTok agreed to a $400 million COPPA settlement with the DOJ — $300 million up front, $100 million more once an old Musical.ly consent decree is vacated — one of the largest recoveries ever in a children's privacy case.

TikTok Will Pay $400 Million to Settle the DOJ's Children's Privacy Lawsuit

One of the largest children’s privacy penalties in U.S. history just landed on TikTok’s desk. The U.S. Department of Justice announced that TikTok has agreed to pay $400 million to settle a 2024 lawsuit alleging the platform violated the Children’s Online Privacy Protection Act, or COPPA — closing out a case that has shadowed the company through two years of ownership upheaval and intensifying scrutiny of how social platforms treat their youngest users.

The settlement, disclosed Friday, ends the DOJ’s allegations that TikTok and its China-based parent company ByteDance collected personal information from children under 13 without notifying parents or obtaining verifiable parental consent, as federal law requires. The complaint also accused the companies of failing to honor parents’ requests to delete their children’s accounts — and, more damningly, of choosing not to delete accounts even when the companies knew they belonged to kids under 13.

How the $400 million breaks down

The payment is structured in two tranches. TikTok will pay $300 million immediately, with the remaining $100 million due “upon entry of an order vacating a prior consent decree entered against TikTok’s predecessor, Musical.ly,” according to the DOJ’s press release.

That Musical.ly reference matters. TikTok absorbed the short-video app Musical.ly in 2018, and along with it inherited a 2019 Federal Trade Commission consent decree under which the company paid a then-record $5.7 million penalty for identical COPPA violations. The new settlement effectively supersedes that old agreement: once a court formally vacates the 2019 decree, the second $100 million installment kicks in. The DOJ described the total package as “one of the largest recoveries ever obtained in a COPPA case” — an order of magnitude beyond anything the FTC extracted in the first round.

“This settlement is a major victory for American children and parents,” said U.S. Associate Attorney General Stanley E. Woodward Jr. in a statement. “The Department’s priority is ensuring that children are protected online and that companies entrusted with their personal information meet their legal obligations. This resolution secures a substantial recovery while reinforcing the protections that families expect and deserve.”

What the lawsuit alleged

Filed in August 2024 during the Biden administration, the DOJ’s suit zeroed in on three core failures. First, TikTok allegedly allowed millions of users under 13 to create regular accounts — not the restricted “TikTok for Younger Users” experience the company built after its earlier FTC trouble — and collected their personal data without parental consent. Second, the company allegedly ignored parents’ deletion requests, a direct COPPA obligation. Third, it allegedly continued processing data from accounts it internally knew belonged to children.

For a platform whose recommendation engine feeds on behavioral signals — watch time, rewatch rates, shares, device identifiers — the allegations cut to the heart of the business model. Children’s viewing behavior is data, and COPPA exists precisely to keep that data out of the training loop unless parents say yes.

A different TikTok than the one that was sued

The company that agreed to this settlement is structurally not the one the DOJ sued. Since the 2024 filing, TikTok’s U.S. arm has been reorganized into a joint venture with major American investors including Oracle, Silver Lake, and the Emirati investment firm MGX, under the divest-or-ban framework Congress passed in 2024. The DOJ itself acknowledged this in announcing the deal, noting that TikTok has “undergone significant changes to its ownership, management, compliance functions, and privacy practices” since the lawsuit began, and has “implemented extensive measures designed to strengthen safeguards for younger users, improve age-related controls, and enhance parental oversight.”

That framing lets both sides claim a win: the Justice Department banks a headline recovery and formal accountability, while TikTok closes a legacy legal liability inherited from the ByteDance era and exits an old consent decree that constrained its compliance operations. Representatives for TikTok did not immediately respond to a request for comment on the settlement.

The broader children’s-safety reckoning

The settlement does not land in a vacuum. Social media companies are facing an avalanche of litigation over children’s safety and privacy, and the enforcement temperature keeps rising. Meta Platforms is currently on trial in federal court in Oakland, California, facing allegations from state attorneys general that it violated COPPA along with various state statutes — a case widely watched as a bellwether for the entire industry. In a separate action, a New Mexico judgment against Meta already exceeded $940 million. And the wave is global: a growing list of countries, including Australia and several EU member states, have moved to ban or restrict social media access for young children and teens outright.

For AI-adjacent platforms the lesson is sharpened by scale. COPPA’s parental-consent regime was written in 1998 for websites collecting names and email addresses. Today’s recommendation systems extract thousands of behavioral signals per session, and age assurance remains stubbornly imperfect — kids lie about their birthdates, and platforms have historically had weak incentives to catch them. A $400 million bill is the price of that gap, and regulators on both sides of the Atlantic are signaling it will keep climbing until age verification and data minimization for minors become default engineering requirements rather than legal afterthoughts.

What happens next

The immediate $300 million payment closes the DOJ’s case, but two threads remain open. The court still must enter the order vacating the 2019 Musical.ly consent decree to trigger the final $100 million — a procedural step, but one that formally retires the FTC-era regime. And the settlement covers only the federal COPPA claims; it does not immunize TikTok from state-level consumer protection actions, the ongoing FTC scrutiny of its data practices, or the class-action bar, which routinely cites government settlements as roadmaps for private litigation.

For the rest of the industry, the number is the message. The era of nine-figure penalties for children’s privacy violations has arrived, and with Meta’s trial underway and legislative pressure mounting in multiple jurisdictions, TikTok’s $400 million check is less a conclusion than a preview.