TikTok to Pay $400 Million Over Children’s Data Privacy
TikTok and its parent company ByteDance will pay $400 million to settle the US Justice Department’s lawsuit over children’s privacy. The agreement, announced on 21 August 2026, closes a case opened in 2024 accusing the platform of collecting personal information from users under 13 without parental consent. The department describes the settlement as one of the largest ever obtained under the federal children’s privacy statute.
A $400 million penalty paid in two stages
The sum will not be paid in one go. $300 million is due immediately. The remaining $100 million will only be paid upon entry of an order vacating an earlier consent decree against Musical.ly, the app ByteDance acquired in 2017 and later merged into TikTok.
That legal detail matters. Musical.ly had already been sanctioned in 2019 over comparable failings. The 2024 case argued precisely that TikTok had not corrected the practices that led to its predecessor’s first penalty.
What US prosecutors accused TikTok of
The statute at issue is COPPA, the Children’s Online Privacy Protection Act. It requires services aimed at minors to obtain verifiable parental consent before collecting any personal data from a child under 13.
The complaint set out three main grievances.
- Collecting personal data from users under 13 without prior parental consent.
- Weaknesses in Kids Mode, the space meant to give younger users a restricted, protected experience.
- Failing to honour deletion requests from parents seeking to remove their child’s account.
That last point usually carries the most weight in court: it is no longer a design oversight but an explicit request left unanswered.
What TikTok has changed since
The platform points to measures introduced since the case opened: stronger age-related controls, more comprehensive parental supervision tools, and tighter safeguards applied to minors’ accounts. The settlement includes no admission of liability, a standard feature of such agreements.
Still, $400 million for a company of ByteDance’s size looks closer to an operating cost than a deterrent. That is the recurring criticism of settlements like this one: they close the file without necessarily changing the business model that produced it.
Europe has already hit harder
The issue is not new on the other side of the Atlantic. In 2023, Ireland’s data protection authority fined TikTok 345 million euros specifically over its handling of minors’ data, including child accounts set to public by default.
The difference lies in the mechanism. GDPR calculates penalties as a share of global turnover and applies to any processing targeting European residents, wherever the company is based. COPPA specifically targets under-13s and works through per-violation fines. Two philosophies, one shared finding: platforms built on engagement struggle structurally to protect the youngest users.
What you can do as a parent
Beyond the court case, a few concrete habits remain useful.
- Turn on TikTok’s Family Pairing, which links your child’s account to yours and lets you manage screen time, direct messages and profile visibility.
- Check that the account is private: a minor’s profile should never be public by default.
- Review the permissions granted to the app on the phone, especially location, microphone and contacts.
- Remember that account deletion is a right: in Europe, GDPR lets you demand the erasure of your child’s data.
Also worth reading: AirPods with cameras: macOS code reveals how they work.
The takeaway
With this $400 million settlement, TikTok closes one of the heaviest children’s privacy cases in its US history. The figure is striking; the real impact is less certain. The genuine test will be whether the platform can show, over time, that its safeguards work before a judge forces the issue.
Do you manage your children’s TikTok use, and with which tools? Share your approach in the comments, and find our online privacy guides on Wanda-techs.com.
Read also:
Share this content:
Post Comment