TikTok and its parent company ByteDance have agreed to pay $400 million to settle a civil lawsuit brought by the US Department of Justice (DOJ) and the Federal Trade Commission (FTC), resolving allegations of federal children’s privacy violations under the Children’s Online Privacy Protection Act (COPPA).
The agreement represents one of the largest financial penalties ever secured in a COPPA enforcement action.
Key Terms of the Settlement
-
Financial Structure: TikTok will make an immediate payment of $300 million, followed by an additional $100 million once a federal court enters an order vacating a prior 2019 consent decree tied to TikTok’s predecessor, Musical.ly.
-
Core Allegations: The 2024 DOJ complaint alleged that TikTok knowingly permitted children under 13 to create standard accounts, collected personal data (including email addresses) without parental consent, retained child user data, and allowed interaction with adult users—even on accounts designated as “Kids Mode.”
-
No Admission of Liability: The settlement resolves claims without a formal court determination or admission of legal liability by TikTok or ByteDance.
Operational & Compliance Changes
According to court filings and statements covered by Al Jazeera and The Guardian, TikTok has updated its internal privacy protocols:
-
Age Moderation & System Gates: All users are required to provide a verified date of birth. TikTok has deployed age-detection systems designed to catch underage users who input false birthdates.
-
Dedicated Oversight: TikTok maintains specialized personnel focused on underage account identification, resulting in the removal of tens of thousands of non-compliant accounts.
-
U.S. Data Governance: The settlement coincides with broader restructuring changes, including ByteDance establishing a majority American-owned U.S. joint venture to manage user data for its more than 200 million American users.
