A Record-Breaking Fine for Children's Privacy Violations

TikTok has agreed to pay $400 million to settle claims that it violated the Children's Online Privacy Protection Act (COPPA), a federal law designed to protect kids under 13 online. According to reporting from PCMag, this appears to be the largest fine ever issued under COPPA, and it marks the second time TikTok has been penalized under the law.

The settlement stems from a Justice Department lawsuit filed in 2024, which accused TikTok and its parent company ByteDance of collecting personal information from children under 13 without notifying parents or obtaining their consent. Federal prosecutors also alleged that the company failed to delete accounts belonging to underage users even after being made aware of them, a claim that strikes at the heart of what COPPA is meant to prevent.

How the Settlement Breaks Down

Under the terms of the deal, TikTok will pay $300 million immediately, with the remaining $100 million due once a court formally vacates an earlier consent decree tied to Musical.ly, the app TikTok absorbed years ago. That earlier decree was part of TikTok's first brush with COPPA enforcement, making this settlement effectively the company's second trip through what PCMag calls the "COPPA wringer."

Despite the headline number, the practical financial impact on TikTok is expected to be minimal. For a platform with the kind of user base and revenue TikTok commands, $400 million is a manageable cost of doing business rather than a crippling penalty. That reality has fueled criticism from privacy advocates who argue that fines of this size rarely change corporate behavior in a meaningful way, especially when they arrive years after the alleged violations occurred.

Why This Case Matters Beyond the Dollar Figure

COPPA violations are not just a regulatory technicality. The law exists because children under 13 are considered unable to meaningfully consent to having their data collected, tracked, or monetized. When a platform gathers information like location data, viewing habits, or device identifiers from young users without parental permission, that data can be used to build detailed profiles well before those children are old enough to understand what's happening to their personal information.

This is not TikTok's only recent privacy headache. The company is also facing a separate proposed class action lawsuit alleging that a breach in June 2026 exposed the data of roughly 2.4 billion TikTok users worldwide. Taken together, the COPPA settlement and the breach litigation paint a picture of a platform under sustained scrutiny over how it collects, stores, and protects user data, whether those users are adults or children.

What This Means For You

If you're a parent, this settlement is a reminder that age verification on social media apps is often weaker than it appears. TikTok's terms of service require users to be at least 13, but enforcement has historically been inconsistent, and this case shows that accounts belonging to underage users can persist far longer than they should.

For any TikTok user, the settlement is also a signal that the platform has, at least in the past, struggled to manage data deletion requests and account oversight. That's worth keeping in mind when deciding what personal information to share, how privacy settings are configured, and whether family members, especially younger ones, have accounts that need closer review.

Regulatory fines like this one also tend to arrive well after the underlying problems occurred, which means the practical fix falls largely on individual households in the meantime. Reviewing app permissions, checking what data an account has collected, and talking with kids about what they share online remain the most immediate ways to reduce exposure while enforcement plays out at the government level.

Key Takeaways

  • TikTok's $400 million settlement is reportedly the largest COPPA fine on record, tied to allegations of collecting children's data without parental consent.
  • The company will pay $300 million upfront and $100 million later, once an earlier consent decree is formally vacated.
  • Financially, the fine is unlikely to meaningfully affect a company of TikTok's size and revenue.
  • Parents should periodically check whether children in their household have TikTok accounts and review the platform's privacy settings and data permissions.
  • This settlement adds to a broader pattern of privacy and security concerns surrounding TikTok, including separate allegations of a large-scale data breach affecting billions of users.

As regulators continue to push back against platforms that collect data from minors without consent, users and parents alike benefit from staying proactive rather than waiting for enforcement actions to catch up.