Astraas

Policy & Industry·Child privacy

TikTok's $400 million settlement has a $100 million asterisk

The Justice Department has settled its 2024 children's privacy lawsuit against TikTok and ByteDance for $400 million, one of the largest COPPA recoveries ever. A quarter of the money only changes hands if a consent decree from the Musical.ly era is vacated first.

RA
22 August 2026 · 5 min read
TikTok headquarters building exterior with company signage.
Photo: Coolcaesar · CC BY 4.0 · via Wikimedia Commons

The verdict

The headline number is $400 million, and it is real: the Department of Justice describes it as one of the biggest COPPA recoveries on record. But $100 million of it is conditional, payable only upon entry of an order vacating the consent decree TikTok's predecessor, Musical.ly, agreed to years ago. Part of the settlement is a refinancing of old obligations rather than new money. The DOJ is also openly crediting the app's new ownership structure, the one assembled to survive the divest-or-ban law, as evidence of changed behaviour. Whether that structure produces lasting privacy discipline is the part nobody can know yet.

Total settlement
$400M
Paid immediately
$300M
Contingent tranche
$100M
Musical.ly FTC fine, 2019
$5.7M

TikTok will pay $400 million to end the Justice Department's 2024 COPPA suit, the agency announced on Friday. The Verge's report describes the recovery as among the largest ever under COPPA, the US children's-privacy law. The number isn't in dispute. How the money is structured is the interesting part.

A quarter of the fine is a paperwork swap

TikTok pays $300 million immediately. The remaining $100 million changes hands only upon an order vacating the old consent decree against Musical.ly, the short-video app TikTok absorbed before the rename. That decree dates to a 2019 FTC settlement, which cost $5.7 million at the time.

The practical effect: a quarter of the headline figure is less new money than a replacement for an old obligation. The DOJ's announcement doesn't spell out the mechanics of the vacatur, and neither TikTok nor ByteDance responded to requests for comment. Reading between the lines is all that's available. The lines are short.

What the lawsuit actually alleged

The 2024 suit, filed under the previous administration, claimed TikTok let children under 13 create accounts and collected their data without notifying parents or getting verifiable consent. It further alleged that data was collected from children who used Kids Mode, and that the company frequently failed to delete children's information when parents asked. Breaching the earlier FTC settlement was part of the claim too.

None of it was tested at trial. Settlements avoid findings of fact, which is why the DOJ's language credits changes the company has made rather than adjudicating what it did.

The ownership change is doing a lot of work

The Justice Department went out of its way to note that TikTok has undergone significant changes to its ownership, management, compliance functions and privacy practices since the suit was filed. The ownership change is real enough: TikTok's US business now sits inside TikTok USDS, a joint venture controlled by Oracle, Silver Lake and MGX, with ByteDance holding a 19.9 percent stake. That structure was assembled to satisfy the divest-or-ban law, not this lawsuit. It's being read as evidence of good behaviour in both directions anyway. Earlier this month the Office of Management and Budget cleared federal workers to use the app on government devices again, undoing a 2022 ban.

What to watch: compliance without a referee

The settlement credits TikTok's own measures: strengthened safeguards for younger users, improved age-related controls, enhanced parental oversight. What the announcement doesn't describe is an independent monitor or an external auditor with access to the systems. The compliance story is, for now, reported by the company that's being trusted.

The $100 million contingent tranche at least keeps a court's attention on the file a while longer. Everyone else finds out what 'extensive measures' means the same way parents did the first time around.

Get it in your inbox.

The stories that mattered, and the detail the announcement buried. One confirmation email, then nothing until you say yes.

Free · Unsubscribe anytime

TikTok COPPA Privacy DOJ