The US Department of Justice announced Friday that TikTok and its parent company ByteDance have agreed to pay $400 million to settle a 2024 lawsuit alleging violations of the Children's Online Privacy Protection Act (COPPA).
The breakdown: $300 million is due immediately, with the remaining $100 million contingent on 'entry of an order vacating a prior consent decree entered against TikTok's predecessor, Musical.ly,' according to the DOJ. The agency called the settlement 'one of the largest recoveries ever obtained in a COPPA case.'
The original complaint alleged that TikTok collected personal data from children without notifying parents or obtaining consent, failed to delete accounts when parents requested it, and — according to Forbes — knowingly allowed children to create standard TikTok accounts intended for users 13 and up, enabling them to post videos and message adults.
Associate Attorney General Stanley E. Woodward Jr. called it 'a major victory for American children and parents.' Assistant Attorney General Brett A. Shumate added that 'companies that collect children's personal information must comply with the law.'
The DOJ noted that TikTok 'has undergone significant changes to its ownership, management, compliance functions, and privacy practices' since the lawsuit was filed — a reference to the ownership restructuring in which ByteDance sold a majority stake in its US operations to a group of American and global investors. That deal closed in January.
This is not TikTok's first rodeo. The company agreed to a $92 million settlement in 2022 over claims it collected and profited from private user information including facial and geolocation data. Add it all up and ByteDance has agreed to roughly $500 million in US settlements since 2019, per Forbes.
TikTok did not immediately reply to a request for comment.
Voltage take: Here's the thing. A $400 million check is a real number, and the DOJ's enforcement of COPPA — a law Congress passed precisely to protect children from exactly this kind of data harvesting — is the administrative state doing something it was actually designed to do. No ideological gymnastics required.
What the settlement also confirms is the cost of building a surveillance-first product and hoping regulators blink. They didn't. The new ownership structure may have bought TikTok a cleaner political profile in Washington, but it did not erase the liability that accumulated under the old one. The changelog on child privacy compliance should have been written years earlier. It ships when it ships — and sometimes the bill arrives first.
