TikTok's $400mn settlement prices the second offence at about 70 times the first
Musical.ly paid $5.7mn in 2019 over the same statute. The DOJ's complaint treats registration-flow design as the violation, which makes age-gating a documented enforcement target.
The Product Desk
What happened
- TikTok and ByteDance will pay $400mn to settle the Justice Department's COPPA case over millions of under-13 users and their data.
- Predecessor Musical.ly paid $5.7mn in 2019 and undertook to stop under-13s creating accounts.
- The deal also obliges stronger age controls, extra safeguards for children and better parental oversight tools.
Why it matters
- What it sets up precedent Repeat offending in children's privacy now carries a published multiple, so any platform arguing its age checks have improved is arguing against a comparator that starts at $400mn.
- What it limits constraint An age assurance scheme a regulator can measure needs more identity data, which narrows the ways a product team can satisfy both duties without picking one to fail.
- Who's exposed exposure Sign-up flow revisions and internal warnings about underage users are the material these cases turn on, which pulls growth and product decisions into discovery alongside the privacy team.
- What doesn't add up contradiction The BBC has the settlement covering only TikTok's China-based operations while the DOJ credits improvements at the divested US business, so which balance sheet is being disciplined is not clear...
Next story · Product · Sep 27
US Justice Department asks EU court to let it argue X's side against the first DSA fineConfirmed4 publishers
The allegation doing the work in the 2024 complaint is not simply that under-13s were present. It is design. The Justice Department said TikTok changed aspects of its registration policies in ways that made it harder to determine whether users were old enough to join [11], and that the company kept and used children's information, including data usable for ad targeting, after employees had raised concerns about young users on the platform [12]. Both of those are artefacts rather than impressions. A registration flow has versions. An internal concern has a sender and a date.
That is what makes the arithmetic worth doing. Musical.ly paid $5.7mn in 2019 and committed to preventing under-13s from creating accounts [7], and the DOJ's case was that the terms of that earlier FTC settlement were violated, along with data collection in "Kids Mode" and frequent failures to honour parental deletion requests [8]. The second visit costs roughly seventy times the first [22]. For scale, Google paid $170mn in 2019 and Epic Games $275mn in 2022 for COPPA violations [16], so $400mn lands about $125mn above the previous high mark without reaching the two of them added together [23]. The DOJ calls it one of the largest recoveries ever obtained under the statute [9].
The payment structure is the tell about what the government still wants. Three hundred million is due immediately and the last $100mn only once the 2019 FTC consent decree is vacated [2], which parks a quarter of the money [14] on the disposal of the old order. Nobody was found liable: the agreement requires no admission of wrongdoing [5], and the DOJ's announcement states the resolved claims are allegations only with no determination of liability [6]. So what is on the record is a theory of the case with a price attached, which is exactly what a compliance function has to plan against.
The terms a regulator can come back and measure are the age-related controls, the additional safeguards for children and the parental oversight tools [24]. The DOJ notes the company has already changed ownership, management, compliance functions and privacy practices [4], and assistant Attorney General Brett Shumate said children and parents are better protected today than when the case began [15].
Europe reached a comparable number earlier and by a different route. Ireland's Data Protection Commission fined TikTok 345mn euros in September 2023 over its handling of children's accounts [13], in a bloc where a third of fines against social platforms concern children [26], and the Commission has separately charged TikTok under the Digital Services Act over failures to protect minors [17]. Legislation is following: the EU says its age verification app is ready, Ursula von der Leyen is pushing bloc-wide protections, and Norway plans to ban social media for under-16s with liability sitting on platforms [18]. All of it hits the same obstacle, which is that establishing a user is a child means collecting the data the privacy regime exists to restrict [19].
Meanwhile the scrutiny has not paused. Days before the settlement, Bloomberg reported that TikTok had deliberately disabled an algorithmic safeguard for roughly 10% of US users as an experiment, a safeguard meant to reduce the chance of users being overwhelmed by harmful content [20], prompting a letter to CEO Shou Chew and US business head Adam Presser from Senators Marsha Blackburn and Richard Blumenthal [21]. The registration flow was a product decision that a federal docket now describes line by line. The next one will be read the same way.
What to watch
- Whether the 2019 FTC consent decree is actually vacated, which is what releases the outstanding $100mn.
- How the Commission's Digital Services Act charges over minors resolve, since those penalties run separately from the US settlement.
- Whether the Blackburn and Blumenthal letter over the disabled safeguard becomes a hearing or a second enforcement track.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence76
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence70
Perspective Coverage
6 publishers- Builder
- Builder 23%
- Operator
- Operator 47%
- Investor
- Investor 30%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
TikTok and ByteDance reached a $400 million settlement with the US Department of Justice to resolve allegations they violated COPPA by allowing millions of children under 13 to use the platform and collecting their personal information without required parental consent.
- [2]
Under the settlement terms, TikTok will pay $300 million immediately and another $100 million after its prior agreement with the FTC, a 2019 consent decree, is vacated.
- [3]
The case stems from a lawsuit first filed in 2024 by the DOJ under the Biden administration.
- [4]
In announcing the settlement, the DOJ noted the app has undergone significant changes to its ownership, management, compliance functions, and privacy practices.
- [5]
The agreement does not require TikTok or ByteDance to admit wrongdoing.
- [6]
The Justice Department's own announcement states that the claims it resolved are allegations only and that there has been no determination of liability.
- [7]
In 2019 the company agreed to pay $5.7 million to settle allegations that its predecessor, Musical.ly, had violated COPPA, and committed to taking steps to prevent children under 13 from creating accounts.
- [8]
The DOJ alleged the company violated the terms of the earlier FTC settlement related to its acquisition of Musical.ly, wrongfully collected data about children who used "Kids Mode", and frequently failed to comply with requests from parents to delete their children's data.
- [9]
The DOJ said the settlement is one of the "largest recoveries ever obtained" for a case related to COPPA.
- [10]
TikTok finalised a deal creating a new entity for its US business, TikTok USDS Joint Venture, controlled by investors including Oracle, Silver Lake and MGX, with ByteDance retaining a 19.9 percent stake.
- [11]
The case alleged that TikTok changed aspects of its registration policies in ways that made it more difficult to determine whether users were old enough to join the service.
- [12]
The case alleged the company maintained and used information belonging to children, including data that could be used for targeted advertising, even after employees raised concerns about the presence of young users on the platform.
- [13]
Ireland's Data Protection Commission fined TikTok 345mn euros in September 2023 over how the platform handled children's accounts.
- [14]
The $100mn contingent tranche is 25% of the $400mn total.
- [15]
Assistant Attorney General Brett Shumate said: "Children and parents are better protected today than they were when this case began."
- [16]
Other companies that have paid penalties to the US government for COPPA violations include Google, which paid $170mn in 2019, and Epic Games, which paid $275mn in 2022.
- [17]
The European Commission has formally charged TikTok under the Digital Services Act over failures to protect minors, a separate process with separate penalties.
- [18]
The EU says its age verification app is ready, Ursula von der Leyen is pushing bloc-wide protections, and Norway plans to ban social media for under-16s with liability sitting on the platforms.
- [19]
Verifying that a user is a child means collecting the data that European privacy law exists to restrict.
- [20]
Days before the settlement, Bloomberg reported that TikTok had intentionally disabled an algorithmic safeguard for roughly 10% of US users as part of an experiment; the safeguard was designed to reduce the possibility that users would be overwhelmed by harmful or potentially damaging content.
- [21]
Republican Sen. Marsha Blackburn of Tennessee and Democratic Sen. Richard Blumenthal of Connecticut sent a letter to TikTok CEO Shou Chew and Adam Presser, chief executive of the company's US business, questioning the decision to disable the safeguard.
- [22]
The $400mn settlement is roughly 70 times the $5.7mn Musical.ly paid in 2019 over the same statute.
- [23]
At $400mn the settlement is $125mn larger than Epic Games' $275mn COPPA penalty, but smaller than Google's $170mn and Epic's $275mn combined, which total $445mn.
- [24]
The settlement includes stronger age-related controls, additional safeguards for children, and measures designed to give parents enhanced oversight of their children's activity and personal information.
- [25]
The BBC reports that while the lawsuit predates the split of TikTok's US business from its original base in China, the settlement only involves TikTok's operations in China.
- [26]
In the EU, a third of fines against social platforms concern children.
Sources
6 independent publishers whose own reporting we read for this story.
- bbc.co.ukTikTok to pay $400m to US in one of largest child privacy settlements
1 article · August 21, 2026
- dexerto.comTikTok agrees to pay $400 million over claims it illegally collected children’s data
1 article · August 22, 2026
- engadget.comTikTok will pay $400 million to settle Justice Department lawsuit over child privacy
1 article · August 21, 2026
- techcrunch.comTikTok reaches $400M settlement over children’s privacy lawsuit
1 article · August 21, 2026
- thenextweb.comTikTok will pay $400mn over children’s privacy, a number Europe reached in 2023
1 article · August 22, 2026
- theverge.comTikTok will pay $400 million to settle DOJ child privacy lawsuit
1 article · August 21, 2026