TikTok has agreed to pay $400 million to settle a US government lawsuit accusing the social media platform and its parent company ByteDance of violating children’s online privacy rules.
The settlement is one of the largest financial penalties linked to children’s digital privacy in the United States and comes as regulators increase scrutiny of how major technology platforms collect and use data belonging to younger users.
The case dates back to 2024, when the US Department of Justice filed a lawsuit alleging that TikTok and ByteDance collected large amounts of personal information from millions of children under the age of 13 without obtaining the required parental consent.
The allegations centred on the Children’s Online Privacy Protection Act, commonly known as COPPA. The federal law places restrictions on how online services can collect personal information from children younger than 13.
US Assistant Attorney General Brett Shumate said the settlement represented progress in strengthening protections for children and parents online.
TikTok’s $400 million agreement places it among the largest penalties associated with alleged COPPA violations. YouTube previously agreed to pay $170 million in 2019 over children’s privacy allegations, while Epic Games reached a $275 million settlement in 2022 related to children’s privacy practices.
Meta is also facing separate legal action from US states over allegations concerning the treatment of younger users across Facebook and Instagram.
Under TikTok’s settlement, TikTok and ByteDance will initially pay $300 million to the US Department of Justice. An additional $100 million will become payable when the government ends an earlier 2019 consent decree involving Musical.ly, the short-video application that later became part of TikTok.
That earlier agreement required Musical.ly to pay $5.7 million and introduce measures designed to obtain parental consent before collecting information from children under 13.
The latest settlement does not appear to introduce significant additional penalties beyond the financial payment. US authorities have, however, acknowledged that TikTok has undergone substantial changes since the original lawsuit was filed, including changes to its ownership structure, privacy policies and protections for younger users.
When the government launched the case in 2024, officials argued that TikTok had not done enough to determine the ages of younger users or obtain parental permission where required.
The dispute emerged during a wider period of political and regulatory pressure surrounding TikTok in the United States.
Concerns about the platform’s Chinese ownership led the US government to push for TikTok’s American operations to be separated from ByteDance. The restructuring was eventually completed, creating a significantly different ownership arrangement for the company’s US business.
TikTok’s US operations are now reportedly 81% owned by a consortium of investors, while ByteDance retains a 19% stake.
The settlement also comes as governments around the world increasingly examine how social media platforms affect children and teenagers.
Regulators are focusing not only on privacy but also age verification, targeted advertising, recommendation algorithms, addictive design features and the amount of personal information technology companies collect from younger users.
For technology companies, the TikTok settlement demonstrates that children’s privacy is becoming an increasingly expensive regulatory risk.
Platforms with millions of younger users may face growing pressure to introduce stronger age-assurance systems, clearer parental controls and stricter limits on the collection and use of children’s personal information.
For parents and younger users, meanwhile, the case highlights a wider question facing the technology industry: how can platforms designed to attract enormous audiences continue innovating while ensuring that children’s personal information remains properly protected?
As social media, artificial intelligence and personalised recommendation systems become increasingly interconnected, children’s digital privacy is likely to remain one of the most closely watched areas of technology regulation.
