TikTok agreed to pay $400 million to settle federal allegations that it violated the Children's Online Privacy Protection Act, concluding a two-year legal battle with the U.S. Department of Justice.
The settlement represents one of the largest privacy penalties ever levied against a social media company. The DOJ initially filed suit claiming TikTok collected personal data from children under 13 without verifiable parental consent, a direct violation of COPPA. The platform did not admit wrongdoing as part of the agreement.
TikTok's data practices around younger users had drawn scrutiny for years. The platform allowed accounts for users under 13 despite lacking mechanisms to verify parental permission before collection of personal information. Internal documents later revealed the company knew about compliance gaps but did not prioritize fixing them immediately. The settlement forces TikTok to implement stricter age verification and parental consent protocols going forward.
The $400 million figure dwarfs previous COPPA settlements. YouTube paid $170 million in 2019 for similar violations. Amazon's Alexa division settled for $10 million in 2023. TikTok's penalty reflects both the scale of its user base and the scope of the alleged violations across millions of child accounts.
The agreement requires TikTok to delete previously collected data from users under 13 when no parental verification exists. The company must also implement new privacy controls that prevent targeted advertising to young users and restrict data sharing with third parties. Independent auditors will monitor TikTok's compliance for at least 20 years, a lengthy oversight period that underscores the severity of the violations.
This settlement arrives amid broader regulatory pressure on TikTok in the United States. Congress has pushed legislation that would force a sale of the platform or face a potential ban, citing national security concerns about Chinese ownership. While this privacy settlement focuses narrowly on child protection, it adds to the mounting regulatory challenges facing ByteDance's flagship app.
The penalty also signals that federal regulators will aggressively enforce COPPA against platforms that knowingly or negligently collect children's data without proper consent mechanisms. The FTC and DOJ have made clear that social media companies cannot treat child privacy as an afterthought or compliance burden to address later.
For TikTok, the settlement closes one significant legal vulnerability but does not resolve existential threats posed by potential divestiture legislation. The company operates in the United States with roughly 170 million monthly active users, many of them teenagers and younger users attracted to short-form video content. Tighter age verification and parental consent tools may reduce engagement among younger cohorts, potentially impacting user growth metrics that matter to advertisers.
The broader impact extends to how platforms design products for youth. TikTok's settlement creates a template for enforcement that other regulators and competitors will watch closely. Platforms like Instagram, YouTube, Snapchat, and Discord all serve substantial youth populations and face similar COPPA compliance obligations. This enforcement action raises the bar for what constitutes acceptable data practices around minors across the social media industry.