TikTok and its parent company ByteDance will pay $400 million to settle US government litigation over how the platform handled children's personal data, the Department of Justice announced on 21 August 2026. The DOJ called it "one of the largest recoveries ever obtained in a COPPA case," a reference to the Children's Online Privacy Protection Act.
Under the settlement, "TikTok will pay $300 million immediately and an additional $100 million upon entry of an order vacating a prior consent decree entered against TikTok's predecessor, Musical.ly," the Department said. That earlier decree stems from a 2019 action against Musical.ly, the app that later became TikTok. The Department stressed that the claims it resolved "are allegations only, and there has been no determination of liability."
What the case was about
The settlement resolves litigation "concerning compliance with the Children's Online Privacy Protection Act and its implementing regulations," the DOJ said. COPPA requires operators to obtain verifiable parental consent before collecting personal information from children under 13, and to honour requests to delete that data. The Department first filed its complaint in 2024 in the US District Court for the Central District of California, on referral from the Federal Trade Commission.
"This settlement is a major victory for American children and parents," said Associate Attorney General Stanley E. Woodward Jr. "The Department's priority is ensuring that children are protected online and that companies entrusted with their personal information meet their legal obligations."
Assistant Attorney General Brett A. Shumate of the Justice Department's Civil Division added: "Companies that collect children's personal information must comply with the law. This resolution secures a significant monetary recovery and reflects the Department's commitment to ensuring children receive the full protections that Congress mandated."
Improvements in Operation
The DOJ noted that, "Since the Justice Department filed its complaint in 2024, TikTok has undergone significant changes to its ownership, management, compliance functions, and privacy practices," adding that the company "has implemented extensive measures designed to strengthen safeguards for younger users, improve age-related controls, and enhance parental oversight."
Those ownership changes are worth separating from the privacy case itself. TikTok's US operations were restructured under a distinct arrangement, the Oracle-led ownership deal struck to keep the app running in the United States, which created a new US entity to oversee data protection, algorithm security and content moderation. That restructuring runs alongside the COPPA settlement rather than forming part of it.
The European front
TikTok also faces a separate and still-open regulatory track in Europe. In July 2026, the European Commission issued preliminary findings that the platform breached the Digital Services Act over the protection of minors, a process that could lead to a fine but has not yet produced one. The two matters are distinct: the US case is a concluded COPPA settlement, while the EU action remains at the preliminary findings stage.
Compliance Note
For compliance teams, the settlement is a reminder that children's-data rules carry real financial exposure and that regulators will pursue them across years and across ownership changes. The deal's structure is also instructive. By tying $100 million to the vacating of the old Musical.ly decree, the Department linked the new resolution to the platform's regulatory history rather than treating it as a clean slate. The message for operators handling minors' data is that age verification, parental consent and deletion rights are enforcement priorities, not box-ticking exercises.
