- The TikTok and ByteDance agreement amounts to $400 million, with $300 million being paid immediately.
- The lawsuit accused the platform of collecting data from minors without parental consent, violating the COPPA law.
- The litigation dates back to 2019 with Musical.ly and has been closed after an investigation that extended until 2024.
- The agreement comes amid regulatory pressure on other platforms such as Meta.
TikTok and its parent company, ByteDance, have reached a $400 million settlement with the U.S. government to end a lawsuit accusing them of collecting personal data from minors without parental consent. The agreement, announced this week, was finalized with the Department of Justice and avoids a trial, representing one of the largest financial recoveries in a child privacy lawsuit in the country.
The case dates back to 2024, when the U.S. government, on behalf of the Federal Trade Commission, filed a lawsuit alleging that TikTok and Musical.ly, the app that gave rise to the current social network, did not obtain parental consent before storing information from children under 13. Furthermore, the platform did not always remove account data when parents requested its deletion, a practice that directly violated the Children's Online Privacy Protection Act (COPPA).
A two-part agreement: 300 million immediately and another 100 million conditional
The payment will not be made in a single installment. According to the DOJ, TikTok will pay $300 million immediately , while the remaining $100 million will be deferred until a court lifts a previous injunction against Musical.ly, the social network that ByteDance acquired in 2017 and later integrated into TikTok. This payment structure has been described by the agency itself as one of the largest in its history in cases related to COPPA.
Assistant Attorney General Stanley Woodward called the settlement a major victory for American children and parents . According to Woodward, the Justice Department's priority is ensuring that tech companies comply with their legal obligations and that families can trust that their children's information is safe. "This settlement guarantees substantial compensation while strengthening the protections that child users deserve," he said.
The legal battle dates back to 2019, with Musical.ly as the backdrop
The conflict stems from the case of the former Musical.ly, which in 2019 was already fined $5,7 million by the Federal Trade Commission for its handling of children's data. After ByteDance integrated it into TikTok, the situation repeated itself, until in 2024 the Department of Justice filed a new complaint demanding penalties of up to $51,744 per violation per day. According to government calculations, the final amount could have ballooned to hundreds of millions had it gone to trial.
The agreement goes beyond a simple financial settlement: the platform has committed to strengthening its age verification systems and improving parental control tools. Furthermore, the agreement includes a commitment to delete specific child accounts at the request of guardians and to maintain a more transparent data policy. The DOJ highlighted that the company has implemented significant changes in its ownership and management, a transformation that reflects the adjustments negotiated with authorities to ensure the protection of children.
Pressure on other platforms and global repercussions
The agreement comes at a time when digital platforms are under intense scrutiny in many countries. While in the United States some thirty states have challenged Meta for alleged violations of COPPA, and Meta has been ordered to pay millions for failing to protect minors , in the European Union new regulations are also being implemented that require online services to verify ages and obtain parental authorization to process data of minors. TikTok is not exempt from this scrutiny in Europe , where it has had to answer to data protection agencies in countries such as Spain and France regarding its handling of data from younger users.
The legal threat, therefore, is not entirely over. The company will have to continue adjusting its operations if it wants to avoid further lawsuits. Guidelines imposed by COPPA in the United States, and elsewhere by the GDPR or future digital services regulations, require constant monitoring of who can access and control children's personal information. The end of this lawsuit does not mean that the monitoring has ended.
With this agreement, the U.S. government closes one of the most symbolic lawsuits in the technology sector, while also sending a message to all companies that handle children's data: privacy protection is a non-negotiable priority. As companies develop their compliance strategies, European and U.S. regulators are becoming increasingly strict in demanding accountability for the handling of children's data. The resolution of this case, therefore, not only resolves a specific legal process but also marks a turning point in how social media and its use of information from its most vulnerable users are viewed.
