TikTok to Pay $400 Million Over U.S. Child Privacy Claims
The Justice Department says the ByteDance app broke rules protecting children's data. Most of the money is due now, the rest when an old court order is lifted.
Key points
- The U.S. Department of Justice announced on Friday that TikTok will pay $400 million to end a 2024 lawsuit over children's privacy.
- ByteDance, the Chinese company that owns TikTok, will pay $300 million immediately.
- Another $100 million follows once a court vacates an earlier consent decree tied to TikTok's predecessor app.
- The suit accused TikTok of collecting data on users under 13 without parental consent, in breach of federal child privacy law.
- The deal still needs court sign-off before it takes effect.
TikTok is writing a very large cheque to make a children's privacy case go away.
The U.S. Department of Justice said on Friday that the app will pay $400 million to settle a lawsuit filed against it in 2024. The government accused TikTok, and its Chinese parent company ByteDance, of collecting personal information from children under 13 without asking their parents first. That is against the law in the United States under a statute called COPPA, the Children's Online Privacy Protection Act, which forces online services to get parental permission before scooping up data on young kids.
The Hacker News first flagged the settlement figure.
What did TikTok actually do wrong?
Regulators say TikTok let children under 13 sign up, watch, and post on the main app without proper checks, and then collected data about them anyway. In practice that means things like device identifiers, viewing habits, and account details, the raw material that powers the app's recommendation engine.
This is not TikTok's first run-in over the same issue. Its predecessor, Musical.ly, paid a $5.7 million penalty in 2019 for similar conduct, and a court order (a consent decree) was put in place at that time telling the company to clean up its act. The 2024 lawsuit argued TikTok kept doing much the same thing anyway.
How the $400 million breaks down
Most of the money lands right away. The rest is contingent on paperwork.
| Item | Amount | Timing |
|---|---|---|
| Initial payment | $300 million | On settlement |
| Deferred payment | $100 million | When court vacates prior consent decree |
| Total | $400 million | 2024 lawsuit resolved |
One thing the post-mortem will say, if anyone writes one inside ByteDance, is that operating under an existing consent decree and still getting sued for the same behaviour is an expensive way to run a compliance programme. The failure mode here is treating a regulator's prior order as a suggestion.
Should parents be worried about their kids' accounts?
If your child is under 13, this is a good moment to check what they actually use. TikTok offers a separate, limited experience for younger users, and the main app is supposed to be gated at 13 and up. Neither claim has held up perfectly in practice.
A few things worth doing this weekend:
- Ask your child what account they log in with, and whether they gave a real birth date when signing up.
- Turn on Family Pairing in TikTok's settings if they are a teen, which lets a parent's account set screen time and privacy limits.
- Delete accounts belonging to under-13s that slipped through, using the in-app account deletion flow.
None of that undoes data already collected. It does stop the meter running.
What happens next
The settlement still needs a judge's approval. Assuming it goes through, TikTok will also be under fresh compliance obligations, on top of whatever survives from the older Musical.ly order. Expect more age-gating friction inside the app, and more prompts asking users to confirm their date of birth.
Operational takeaway: if a regulator has already told you to fix something, fixing it is cheaper than the second lawsuit.
