TikTok Settles COPPA Suit, Cleans Up Legacy Liability

TikTok will pay $400 million to settle the Justice Department’s 2024 children’s-privacy lawsuit, with $300 million due now and another $100 million contingent on vacating an earlier consent decree tied to Musical.ly. The deal lands as TikTok’s U.S. ownership structure is being reworked. The case alleged that TikTok and ByteDance collected personal data from children under 13 without parental consent, kept accounts they knew were children’s, and ignored deletion requests. The settlement does not describe a technical flaw; it closes off legal exposure by pairing restitution with the older Musical.ly decree that still affects the final bill. For consumer platforms, the lasting issue is inheritance: privacy obligations and consent-decree baggage can survive rebrands, acquisitions, and restructuring. What remains unresolved is less about an exploit than about how old child-data liabilities continue to shape platform governance after the corporate structure changes.

Part of the PlainSec briefing for 2026-08-24

Editions

Sources