TikTok's $400M Children's-Privacy Settlement Is 41% of Every COPPA Dollar Ever Collected — and 70× Its Own 2019 Penalty

On August 21, 2026, the Department of Justice announced that TikTok Inc., TikTok Pty. Ltd. and parent company ByteDance Ltd. agreed to pay $400 million to resolve the government's lawsuit over alleged violations of the Children's Online Privacy Protection Act (COPPA). The underlying complaint was filed in August 2024 in the Northern District of California, alleging the platform knowingly collected personal information from children under 13 without verifiable parental consent and failed to honor deletion requests. The consent order remains subject to court approval, and a settlement resolves allegations without a finding of wrongdoing.

It is TikTok's second COPPA resolution: in February 2019, the same company — then operating as Musical.ly — paid $5.7 million, which was itself the record COPPA penalty at the time. The 2026 figure is 70 times the 2019 one.

To put the number in context, we compiled every COPPA enforcement action since the rule took effect in April 2000 — 52 actions by the FTC, DOJ and state attorneys general — and verified every action of $1 million or more against its government primary source. The complete dataset is free to download on our research page.

Three findings stand out:

• $964 million has been collected under COPPA in 26 years — and 41% of it comes from this single TikTok settlement.
• 98% of all COPPA dollars date from 2019 or later. In its first two decades the law produced mostly five- and six-figure penalties; the record stood at $1 million (Xanga) as late as 2011.
• The record has now been broken eleven times, and the last three record-holders are household names: YouTube ($170M, 2019), Epic Games ($275M, 2022), TikTok ($400M, 2026).

The inflection point is the September 2019 YouTube settlement ($136M federal + $34M to New York) — the first nine-figure COPPA penalty and the moment the FTC began treating children's data as a headline enforcement priority rather than a compliance footnote. Since then, six of the largest penalties in the law's history have been announced: Epic Games ($275M civil penalty within a $520M package), Amazon's Alexa case ($25M), Microsoft's Xbox case ($20M), Genshin Impact publisher Cognosphere ($20M), Disney ($10M in 2025) and now TikTok.

Two structural drivers appear in the case files: platforms' shift to knowledge-based liability (regulators alleging companies knew underage users were on general-audience services), and the 2013 COPPA Rule amendments that extended the definition of personal information to persistent identifiers used for targeted advertising — the theory underlying the YouTube, OpenX and Disney actions.

COPPA civil penalties are paid to the U.S. Treasury — they do not fund consumer refunds, and there is no claim form for parents. That distinguishes penalty settlements like this one from class-action settlements with consumer funds. Separate private litigation and state actions against TikTok remain pending (including Texas's 2024 state COPPA suit, which is excluded from our totals because it has not resolved).

For families, the practical effect is prospective: the consent order's compliance obligations — age-gating, deletion mechanics, limits on data collection from under-13 accounts — matter more than the headline number.