TikTok will pay $400 million to settle DOJ child privacy lawsuit

What happened

TikTok will pay $400 million to settle DOJ child privacy lawsuit

The US Department of Justice announced on Friday that TikTok has agreed to pay $400 million to settle a federal lawsuit filed in 2024 alleging the platform violated the Children's Online Privacy Protection Act, known as COPPA. The settlement resolves government claims that TikTok collected personal data from children without notifying parents or obtaining their consent, and that the company failed to delete accounts belonging to underage users when required to do so.

This piece breaks down the announcement, what changed in TikTok's legal standing, who the ruling affects, how the settlement works in practice, and what builders and operators of platforms with minor users should be tracking as a result. It is written for product managers, privacy engineers, legal and compliance teams, and any developer operating a consumer app where children might be among the users.

The announcement

How it works

The Department of Justice filed the underlying lawsuit in 2024, accusing TikTok of systematically breaking COPPA. The law requires that operators of online services directed at children obtain verifiable parental consent before collecting personal information from users under 13, and it places strict obligations on how that data is stored and when it must be erased. The DOJ's complaint alleged TikTok failed on both counts: collecting data without the required parental notice or consent, and keeping accounts that should have been deleted. The $400 million settlement announced Friday is the financial resolution to those federal claims.

Settlements of this kind typically do not include an admission of guilt from the settling party, though TikTok has not publicly disputed the core factual basis of the DOJ's allegations as laid out in the 2024 complaint. The $400 million figure makes this one of the largest COPPA-related settlements in the law's history. The FTC previously extracted a $5.7 billion settlement from Facebook in 2019 over broader privacy violations, but in the narrower COPPA enforcement category, a nine-figure resolution is significant and will likely serve as a reference point in future enforcement actions.

What actually changed

The settlement resolves the specific 2024 DOJ lawsuit. What that means operationally is that TikTok avoids a federal court judgment on the COPPA violation claims, and the DOJ closes the case upon payment and whatever behavioral conditions accompany the settlement agreement. The core legal mechanism that COPPA enforcement relies on is the obligation to obtain verifiable parental consent before collecting data from children under 13, and to delete that data when accounts are found to belong to underage users. The allegations in this case were that TikTok did not meet either standard.

Why it matters

What did not change is TikTok's underlying COPPA obligations going forward. The law still applies, the FTC and DOJ still have enforcement authority, and any conditions attached to this settlement would add further compliance requirements on top of existing statute. Platform operators should note that the data collection practices alleged here, collecting without consent and failing to delete on request, are exactly the failure modes COPPA was designed to prevent. A settlement payment does not alter the statute or the agency's enforcement posture.

Who should care

The most directly affected party is TikTok itself, which now carries a $400 million financial liability and, in all likelihood, additional compliance obligations tied to the settlement terms. Beyond TikTok, any company operating a consumer-facing platform that attracts users under 13, or that is directed at children as its primary audience, should treat this settlement as a signal of active federal enforcement. COPPA has been on the books since 1998 but enforcement at this scale reinforces that the DOJ and FTC are willing to pursue large platforms aggressively.

Who is affected

Privacy engineers and product teams at social media companies, gaming platforms, and any app with an account creation flow should audit whether their age-verification, parental consent, and data deletion pipelines actually meet COPPA's requirements. The specific allegations here, collecting data without parental notification and failing to delete underage accounts, are both process failures rather than exotic legal interpretations. If your platform cannot demonstrate that it notified parents, obtained consent, and deleted data on schedule, you are facing the same exposure TikTok faced in 2024.

Availability and how to try it

There is no product or feature to try here. The settlement is a legal and financial resolution, not a software release. What is available publicly is the DOJ's announcement, which describes the nature of the violations alleged in the 2024 complaint. The full settlement agreement, including any behavioral remedies or compliance monitoring requirements attached to the $400 million payment, may be filed publicly in federal court as part of the resolution process.

If you are a compliance professional or legal team member, the document to obtain is the consent decree or settlement agreement itself once it becomes part of the public court record. That document will specify what TikTok agreed to do beyond writing a check, which could include independent auditing, changes to data retention policies, or enhanced parental consent flows. Those details matter more than the dollar figure for anyone benchmarking their own COPPA program against what regulators actually demanded.

What to watch next

What to watch next

The settlement terms beyond the payment are the most important thing to track. Consent decrees in major privacy enforcement actions frequently include ongoing compliance monitoring, third-party audits, and specific process requirements that become a de facto industry standard because regulators reference them in subsequent cases. If the TikTok settlement specifies how age verification should work or what a compliant parental consent mechanism looks like, those specifications will influence how other platforms approach the same design problems.

Also worth watching is whether the FTC pursues a parallel civil penalty action. The DOJ settlement resolves the federal criminal or civil enforcement track that the Justice Department controls, but the FTC has independent authority to impose penalties under COPPA. TikTok has faced FTC scrutiny before, and a separate enforcement action is not precluded by a DOJ settlement. Developers building any product where minors might create accounts should monitor both agencies for updated COPPA guidance that may follow from this case.