TikTok has agreed to pay $400 million to settle a Department of Justice lawsuit alleging the video-sharing platform and its parent company, ByteDance, committed large-scale violations of the Children's Online Privacy Protection Act, according to reporting on the settlement. The figure marks a dramatic escalation from the $5.7 million penalty TikTok's predecessor, Musical.ly, paid in 2019 in what was, at the time, the largest civil penalty the Federal Trade Commission had ever secured in a children's privacy case.
The settlement resolves litigation that began in August 2024, when the Justice Department, acting on a referral from the Federal Trade Commission, sued TikTok and ByteDance, accusing the companies of collecting and retaining personal information from millions of children under the age of 13 without the parental consent required under federal law. The lawsuit alleged that despite the 2019 settlement and an accompanying court order requiring TikTok to destroy personal information collected from underage users, the company continued to fall short of its COPPA obligations for years afterward.
At the time the lawsuit was filed, then-FTC Chair Lina Khan said TikTok had knowingly and repeatedly violated children's privacy, describing the alleged conduct as a threat to the safety of millions of young users. The government had sought penalties calculated on a per-violation, per-day basis that could, in theory, have run into the hundreds of millions or even billions of dollars given the scale of TikTok's user base, making the eventual $400 million settlement figure a significant, though not maximal, resolution relative to the government's original exposure calculations.

TikTok has consistently maintained that many of the allegations related to past practices that the company says have since been addressed, pointing to a range of safety features it has rolled out in recent years, including default screen-time limits for younger users, a Family Pairing feature that allows parents to link their accounts to a teen's account for oversight, and additional privacy protections specifically targeted at minors. The company has also stated that it proactively works to identify and remove suspected underage users from the platform.



