TikTok will pay $400 million to settle a Justice Department lawsuit accusing the app of violating the Children’s Online Privacy Protection Act. The tiktok child privacy settlement closes a case the DOJ filed in 2024, and the department announced the deal on Friday.
The lawsuit alleged that TikTok collected data from children without notifying their parents or obtaining consent, and that it failed to delete children’s accounts when parents asked for it. Both are core obligations under COPPA, which requires operators of services aimed at or used by children under 13 to get verifiable parental consent before collecting personal data and to honour deletion requests once they’re made.
How the $400 million breaks down
The payment isn’t a single lump sum. TikTok is set to pay $300 million immediately, with the remaining $100 million due only once a court enters an order vacating a prior consent decree taken out against TikTok’s predecessor, Musical.ly. That structure ties the final quarter of the payment to a specific legal housekeeping step rather than to any further compliance milestone, which matters because it means the case against Musical.ly has to be formally closed out before the settlement is complete on paper.
What the primary document says
The Justice Department’s own announcement is the document worth reading here, not the news writeups of it: the DOJ press release names both TikTok and ByteDance as parties to the resolution, which confirms the settlement reaches the parent company and not just the app entity. The department also credits TikTok with making changes to its privacy practices since the 2024 suit was filed, though the release does not itemise what those changes were, so there’s no independent verification yet of what specifically changed in how the app handles under-13 accounts.
For anyone who has a child using TikTok, the practical upshot is that the underlying complaint, unauthorised data collection and ignored deletion requests, is now a matter of settled record rather than a disputed allegation. It doesn’t retroactively delete data that was already collected, and the settlement itself doesn’t specify a new technical mechanism for parents to verify their deletion requests are honoured going forward.
What to watch next
The $100 million second payment is the concrete thing to track: it only becomes due once a court formally vacates the Musical.ly consent decree, so that court order is the next procedural milestone in this case rather than the settlement being fully wrapped up now.
