Four hundred million dollars sounds like a reckoning. But for a platform that collected data on millions of children, including kids using a mode literally called “Kids Mode,” it might be closer to a line item. TikTok and ByteDance have agreed to pay the Department of Justice $400 million to settle a federal lawsuit over children’s privacy violations, one the DOJ calls among the largest recoveries ever obtained under the Children’s Online Privacy Protection Act, better known as COPPA.
The case traces back to a 2024 lawsuit filed by the Biden-era DOJ. Prosecutors alleged TikTok had violated the terms of an earlier FTC settlement tied to its acquisition of Musical.ly, allowed children under 13 to create accounts, wrongfully collected data from those kids, and repeatedly ignored parents who asked the company to delete their children’s information. That last point is worth sitting with. Parents asked. TikTok “frequently failed” to comply. That’s not a bug in a privacy policy, that’s a choice.
Under the terms of the deal, TikTok pays $300 million now. The remaining $100 million comes later, after TikTok’s prior FTC agreement is formally vacated. So the full payout is conditional. That’s not a minor footnote.
The DOJ, to its credit, didn’t completely roll over in its settlement statement. But it did offer TikTok a notable amount of goodwill. The department pointed to what it called “significant changes” to TikTok’s ownership, management, and privacy practices since the lawsuit was filed. It praised the company for implementing “extensive measures” to improve safeguards for younger users, better age controls, and stronger parental oversight. Whether those measures are independently verified or amount to corporate self-reporting dressed up in legal language is a fair question to ask.
The ownership restructuring the DOJ referenced is real and significant. TikTok finalized a deal earlier this year that spun its US operations into a separate entity called TikTok USDS Joint Venture. Investors including Oracle, Silver Lake, and MGX now control that entity. ByteDance kept a 19.9 percent stake. This structure was designed to address national security concerns about Chinese government access to American user data, including data on children. Whether the new structure actually closes that door, or just makes it harder to see through, remains genuinely unclear.
The settlement lands at an interesting moment for TikTok’s relationship with the US government. Earlier this month, the Office of Management and Budget cleared federal employees to use TikTok again on government devices, reversing a 2022 ban. So within weeks, the government both collected a major privacy settlement from TikTok and welcomed it back onto federal phones. Make of that what you will.
For privacy advocates, the bigger picture here is what COPPA enforcement actually looks like in practice. The law has been on the books since 1998. Platforms have violated it repeatedly. Fines come, settlements are reached, and the data collection continues under slightly updated terms of service. A $400 million settlement is significant by historical standards. But TikTok has hundreds of millions of users. The math on what individual children’s data was “worth” in this settlement is not flattering.
TikTok and ByteDance did not respond to requests for comment. That’s their right. But families whose children had data collected without consent, and whose deletion requests were ignored, probably deserve more than a press release.