TikTok agrees to $400 million settlement over US child privacy claims
ByteDance will pay $400 million to resolve federal allegations that TikTok illegally collected data from minors, highlighting the ongoing regulatory and compliance costs facing the platform following its corporate restructuring.
TikTok and its parent company ByteDance have agreed to a $400 million settlement to resolve federal allegations that the video-sharing application violated children’s privacy laws. Under the terms announced by the Justice Department, the company will remit $300 million immediately and allocate an additional $100 million to vacate a previous consent judgment involving its predecessor application, Musical.ly.
The Justice Department initiated the lawsuit in 2024, accusing the platform of illegally harvesting and retaining data from children without notifying parents or securing consent. Regulators also alleged that the company knowingly permitted users under the age of 13 to open standard accounts, enabling them to post videos and communicate directly with adults.
The Justice Department described the agreement as "one of the largest recoveries ever obtained" in a case related to the Children's Online Privacy Protection Act. For investors and market professionals, the resolution underscores the steep financial toll of regulatory scrutiny on digital platforms operating within the United States.
ByteDance has now committed roughly $500 million to U.S. settlements since 2019. This cumulative figure excludes a separate $92 million payout agreed upon in 2022, which resolved claims that the application collected and profited from private biometric and geolocation data without explicit disclosure in its privacy policy.
Corporate restructuring and data security
The settlement arrives as the company navigates a complex transition in its American operations following intense political and regulatory pressure. The Justice Department acknowledged that the platform has undergone substantial changes in ownership, management, and compliance functions.
This assessment references last year’s transaction where ByteDance sold a majority stake in its U.S. business to a consortium of global and domestic investors, including Oracle. The divestiture was designed to address longstanding criticisms regarding alleged links to the Chinese Communist Party and to secure domestic data handling.
Despite the corporate overhaul, the company continues to manage the fallout from broader data security controversies. Past reporting by Forbes revealed that employees improperly accessed user data and IP addresses to monitor journalists, while sensitive financial information belonging to American influencers and corporate clients was reportedly stored on servers in China.
TikTok has not admitted to any wrongdoing in the current child privacy case. However, the financial penalty marks its largest settlement to date, signaling to institutional partners and advertisers that rigorous compliance will remain a permanent cost of doing business in the American market.