Back to Home
United StatesNews

TikTok Faces $400 Million Fine in the U.S. for Violating Children's Data Privacy

|Source: Federal Trade Commission

On August 21, TikTok and its parent company ByteDance agreed to pay $400 million to the U.S. Department of Justice to settle a lawsuit concerning children's privacy.

This is not the first time TikTok has "paid to avoid trouble" over privacy issues this year. However, the amount sets a record among similar cases.

The Origin: A Lawsuit Filed Two Years Ago

Rewind to 2024, during the Biden administration, the U.S. Department of Justice formally sued TikTok and ByteDance, accusing them of violating a federal law called the Children's Online Privacy Protection Act (COPPA).

The core requirement of this law is simple: any website or app aimed at children must obtain parental consent before collecting personal information from users under the age of 13.

The Department of Justice's allegations were serious: TikTok was accused of allowing a large number of children under 13 to register and use the platform for years, collecting their names, email addresses, and other personal data, and even failing to delete children's accounts when parents explicitly requested it. Notably, as early as 2019, TikTok's predecessor, Musical.ly, had already been fined for the same issue (at that time, the amount was $5.7 million). In other words, this was not a "first offense."

Settlement Plan: Pay $300 Million First, Then an Additional $100 Million

Under the newly reached settlement agreement, TikTok is required to:

  • Pay $300 million immediately;
  • Pay an additional $100 million after the court formally vacates the 2019 consent decree against Musical.ly.

U.S. Deputy Attorney General Stanley E. Woodward Jr. called the settlement a "significant victory for American children and parents," emphasizing that the Department of Justice will continue to ensure that companies holding children's information fulfill their legal obligations.

The Department of Justice also acknowledged that since the lawsuit was filed, TikTok has undergone substantial changes in its ownership structure, management, compliance systems, and privacy policies—a statement that hints at a larger news story behind it.

Why These "Substantial Changes"?

The answer traces back to the highly publicized tug-of-war over whether TikTok would be banned in the U.S. Congress passed a law requiring ByteDance to either divest TikTok's U.S. operations or face a complete ban. The standoff lasted over a year and ultimately ended with ByteDance relinquishing control: currently, 81% of TikTok's U.S. business shares are held by a group of American investors, with ByteDance retaining only 19%. The new platform is operated by the "TikTok USDS joint venture."

It is precisely because of this overhaul in ownership and management that the Department of Justice was willing to offer a "settlement" in terms of penalty amount and subsequent requirements, rather than continuing the fight.

How Significant Is This Amount?

In the context of similar cases, $400 million indeed qualifies as a "top-tier penalty":

  • In 2019, Google's YouTube paid $170 million for the same children's privacy issue;
  • In 2022, Epic Games, the developer of Fortnite, paid $275 million;
  • TikTok's $400 million is now one of the highest settlement amounts in the field of children's privacy.

A Side Note: This Is Not TikTok's Only Fine This Year

It is worth mentioning that in May of this year, TikTok received an even larger fine in Europe—the Irish Data Protection Commission (TikTok's lead regulator in the EU) imposed a fine of €530 million (approximately $600 million) for "unlawfully transferring EU user data to China," marking the third-largest fine in GDPR history. TikTok stated at the time that it would appeal.

The two cases differ in nature and involve different regulators, but when viewed together, it is easy to sense the sustained high-pressure scrutiny from global regulators on this platform's data compliance issues.

While $400 million is not a fatal blow for a platform valued at hundreds of billions, the signal behind this settlement is clear: the protection of minors' data is becoming a compliance red line that internet companies worldwide cannot ignore.