The US government’s 2024 child-privacy case against TikTok is over. The Justice Department announced Friday that ByteDance’s video app will pay $400M to resolve it, with $300M due immediately and another $100M once a court vacates an earlier consent decree against its predecessor, Musical.ly.
Filed alongside the Federal Trade Commission in August 2024, the complaint said the app knowingly let children under 13 sign up, harvested data from users in “Kids Mode,” and ignored parent requests to wipe children’s accounts and information. Regulators called the conduct “massive-scale invasions of children’s privacy.”
Justice Department officials describe the settlement as one of the largest recoveries ever obtained under the Children’s Online Privacy Protection Act, and note that TikTok has since tightened age-related controls, strengthened safeguards for younger users, and improved parental oversight.
Associate Attorney General Stanley E. Woodward Jr. called the deal “a major victory for American children and parents.”
The settlement extends a pattern of scrutiny. European regulators already punished the company once, imposing a 345M euro GDPR penalty in September 2023 over children’s data handling. Separately, a Supreme Court-backed divest-or-ban requirement was met earlier this year when a joint venture took over US operations, keeping the app available.
For security teams, the case is a reminder that consent and data minimization controls for minors remain an enforcement priority, and that child-privacy exposure carries billion-dollar-scale financial risk.
