TikTok’s $400 Million Child-Privacy Settlement: What the DOJ Case Means

TikTok, ByteDance, and affiliated entities agreed to pay up to $400 million to resolve the U.S. Justice Department’s children’s-privacy litigation. The settlement, announced on August 21, 2026, ends the case without an admission of wrongdoing or a court determination that the allegations were proven. 14

The agreement is significant because it combines a new COPPA resolution with the legacy of an earlier Musical.ly case, while TikTok continues to revise its U.S. ownership, data-security structure, and methods for detecting underage accounts.

What TikTok will pay—and when

The settlement has two parts:

• $300 million is due immediately.
• An additional $100 million is conditional on a court entering an order vacating a prior consent decree involving Musical.ly, TikTok’s predecessor. 1

The Justice Department described the total as one of the largest recoveries in a case involving the Children’s Online Privacy Protection Act, or COPPA. 1

What the 2024 lawsuit alleged

The DOJ lawsuit, brought after an FTC investigation, alleged that TikTok and ByteDance:

• collected and used personal information from children under 13 without the required parental consent;
• knowingly allowed children to use the service while retaining their information;
• failed to properly respond when parents sought deletion of their children’s data; and
• violated requirements connected to a 2019 FTC consent order.

These are allegations made by the government. The settlement resolves the litigation but does not establish that every allegation was proven in court.

The parental-consent law at issue: COPPA

COPPA generally requires operators of services directed to children—or services with actual knowledge that they are collecting personal information from children under 13—to provide notice and obtain verifiable parental consent before collecting, using, or disclosing that information. 1

The law also governs related duties, including parents’ ability to review or request deletion of a child’s information. The DOJ’s case focused on whether TikTok’s practices met those obligations and complied with the earlier FTC order.

Why Musical.ly matters

Musical.ly, the predecessor to TikTok, agreed in 2019 to pay $5.7 million to settle FTC allegations that it illegally collected personal information from children. The FTC described that payment as the largest civil penalty it had obtained in a children’s-privacy case at the time.

TikTok’s later case therefore involved more than a new dispute over data collection. It also raised questions about compliance with the commitments made in that earlier settlement. The new agreement’s additional $100 million payment is tied to the court order concerning that prior consent decree. 1

What changed at TikTok after the complaint

The DOJ said TikTok had materially changed its ownership, management, compliance functions, and privacy practices since the 2024 complaint. The department identified those changes as a factor in resolving the litigation. 1

That point matters, but it should not be read as a finding that the historical concerns disappeared. A company’s later compliance changes can affect how a case is resolved; they do not retroactively alter the allegations that led to the lawsuit.

The separate U.S. ownership and data arrangement

The privacy settlement is separate from TikTok’s U.S. ownership and data-security arrangement. Reuters reported that ByteDance finalized a majority American-owned TikTok USDS joint venture intended to secure U.S. user data and help avoid a U.S. ban. Oracle, Silver Lake, and MGX each hold 15%, while ByteDance retains 19.9%.

That structure addresses ownership and U.S. data governance, whereas the COPPA settlement addresses alleged treatment of children’s personal information. They are related to TikTok’s U.S. operations, but they are not the same legal proceeding or remedy.

How TikTok says it identifies under-13 accounts

TikTok requires users to provide a birth date when creating an account and says the birth-date check is only one part of a broader age-assurance process. The company says it also uses signals such as profile information and on-platform content or activity to identify accounts that may belong to someone under 13. Flagged accounts can be reviewed and removed when TikTok determines that the user does not meet the minimum age requirement.

Those measures are detection and enforcement tools, not a guarantee that no child can enter a false birth date or create an account. That distinction is central to the broader privacy debate: age gates may reduce underage access, but COPPA compliance also concerns what happens when a service knows—or should know—that it is collecting information from children.

The bottom line

The agreement requires up to $400 million, with $300 million paid immediately and $100 million dependent on a court order involving Musical.ly’s earlier consent decree. It resolves the DOJ’s 2024 allegations that TikTok failed to obtain parental consent, honor deletion requests, and comply with COPPA-related obligations. 1

For parents and policymakers, the settlement’s practical significance is less about treating the payment as proof of liability and more about the compliance question it leaves in focus: whether TikTok’s ownership, privacy systems, and age-detection controls can reliably keep under-13 users’ data outside the service or handle it in the way COPPA requires.