TikTok and parent company ByteDance have agreed to pay a $400 million settlement to resolve a 2024 Justice Department lawsuit alleging widespread violations of the Children’s Online Privacy Protection Act. The resolution includes an upfront payment of $300 million, with the remaining $100 million contingent on vacating an older federal consent decree.
The U.S. Department of Justice announced a financial resolution that targets systemic data collection from underage users. The agreement stems from a 2024 complaint filed under the administration of former President Joe Biden, which accused the platform of collecting vast amounts of data on millions of users under the age of 13 without required parental safeguards.
Federal authorities charged that the short-form video application violated the Children’s Online Privacy Protection Act, a federal statute enacted in 2000. Under the terms of the resolution filed in federal court, the legal action brought against TikTok and parent company ByteDance is being dismissed with prejudice.
Financial Structure and the Musical.ly Precedent
Under the financial terms negotiated by the Justice Department, the penalty carries a split structure. TikTok will pay $300 million immediately, fulfilling the first tranche of the total $400 million package.
The remaining $100 million payment is tied to an administrative hurdle. An additional $100 million payment will follow once a court enters an order vacating an earlier consent decree involving Musical.ly, the predecessor entity acquired by ByteDance.
The original Musical.ly case involved allegations that the platform knowingly permitted young children to set up profiles without parental sign-off while gathering names and email addresses. That earlier enforcement action resulted in a $5.7 million penalty as part of that case.
Corporate Restructuring and Platform Controls
The penalty arrives on the heels of major corporate shifts for the application in the United States. Earlier this year, ByteDance finalized an arrangement creating the TikTok USDS Joint Venture, controlled by a group of investors, including Oracle, Silver Lake and MGX, while the Chinese parent organization maintained a 19.9 percent minority holding.
Justice Department officials noted that the app has experienced substantial transformations since the initial 2024 complaint was lodged. According to the DoJ statement, the platform implemented extensive structural adjustments to ownership, management oversight, compliance infrastructure, and daily privacy routines.
In court filings associated with the joint venture, representatives outlined mandatory age-verification hurdles. All users must provide their date of birth before accessing the platform, supported by automated age-moderation filters designed to catch underage accounts.
Broader Federal Scrutiny and Enforcement Context
The $400 million price tag ranks as one of the largest recoveries ever obtained
for violations under the Children’s Online Privacy Protection Act. It sits alongside prior major federal privacy enforcement actions, including a $170m penalty paid by Google’s YouTube in 2019 and a $275m fine paid by Epic Games in 2022.
Assistant Attorney General Brett A. Shumate emphasized the ongoing enforcement stance of federal regulators regarding minor protection standards. Children and parents are better protected today than they were when this case began,
Shumate said.
