TikTok to Pay $400 Million Over U.S. Child Privacy Claims
The Justice Department says the ByteDance app broke rules protecting children's data. Most of the money is due now, the rest when an old court order is lifted.
Key points - The U.S. Department of Justice announced on Friday that TikTok will pay $400 million to settle a 2024 lawsuit over children's privacy. - ByteDance, the Chinese company that owns TikTok, will pay $300 million immediately. - Another $100 million follows once a court vacates an earlier consent decree tied to TikTok's predecessor app. - The suit accused TikTok of collecting data on children without parental consent, breaching COPPA, the federal child privacy law. - The deal still needs court sign-off before it takes effect.
TikTok is writing a very large cheque to make a children's privacy case go away.
On Friday, the U.S. Department of Justice announced that TikTok will pay $400 million to settle a 2024 lawsuit. ByteDance, its Chinese parent, stood accused of collecting personal information from children without parental consent. That's illegal under COPPA, the Children's Online Privacy Protection Act, which requires parental permission before an online service collects data on young kids.
The Hacker News first flagged the settlement figure.
What did TikTok actually do wrong?
Regulators say TikTok let children sign up and post on the main app without proper age checks, then collected data on them anyway. Device identifiers, viewing habits, account details: the raw material powering the recommendation engine.
This isn't TikTok's first run-in over the same issue. Its predecessor, Musical.ly, paid a $5.7 million penalty in 2019 for similar conduct, and a consent decree (a court order requiring the company to fix its practices) was put in place at that time. The 2024 lawsuit argued TikTok kept doing much the same thing anyway. We first covered TikTok's regulatory exposure on 4 July 2026, and this settlement is the biggest consequence we've reported since.
How the $400 million breaks down
Most of the money lands right away. The rest is contingent on paperwork.
| Item | Amount | Timing |
|---|---|---|
| Initial payment | $300 million | On settlement |
| Deferred payment | $100 million | When court vacates prior consent decree |
| Total | $400 million | 2024 lawsuit resolved |
If anyone at ByteDance writes that postmortem, it'll note that operating under an existing consent decree and still getting sued for the same behaviour is an expensive compliance failure. The failure mode here is treating a regulator's prior order as a suggestion.
Should parents be worried about their kids' accounts?
Neither claim has held up perfectly in practice.
A few things worth doing this weekend:
- Ask your child what account they log in with, and whether they gave a real birth date when signing up.
- Turn on Family Pairing in TikTok's settings for teens, which lets a parent's account set screen time and content limits.
None of that undoes data already collected. It does stop the meter running.
What happens next
The settlement still needs a judge's approval. Assuming it clears, TikTok will carry fresh compliance obligations on top of whatever survives from the older Musical.ly order. Expect heavier age-gating inside the app and more prompts asking users to confirm their date of birth.
Operational takeaway: if a regulator has already told you to fix something, fixing it is cheaper than the second lawsuit.
