TikTok pays $400 million for collecting children's data illegally

Imagine a company collecting information about millions of children—what they like, where they go, who their friends are—without asking permission. That is exactly what happened, and now one of the world's most popular apps is paying a huge price for it.

TikTok and its parent company ByteDance have agreed to pay $400 million to settle a lawsuit filed by the United States government. The lawsuit claims that the company collected vast amounts of personal data from users under the age of 13 throughout 2024. This settlement is one of the largest fines ever issued for breaking child privacy laws in America.

Here's why this matters: children's data is especially protected under U.S. law. The Children's Online Privacy Protection Act (COPPA) requires companies to get permission from parents before collecting information from young users. The lawsuit alleges that TikTok and ByteDance violated this rule repeatedly. They gathered information like location data, browsing habits, and device details from millions of children without getting proper consent.

TikTok is not the first company to face this kind of penalty. Other major tech companies have paid similar fines for privacy violations. However, the $400 million settlement shows how serious American regulators have become about protecting children online. The federal government is sending a clear message: breaking privacy rules can be very expensive.

Beyond the money, the settlement requires TikTok to make important changes. The company must improve its age verification system—the technology used to identify and protect young users. It also needs to create stronger safeguards for children's personal information. These changes should make the app safer for its youngest users going forward.

The settlement raises an interesting question for millions of users and parents: How much should we trust social media companies with our information? TikTok remains popular among teenagers and even younger children, but this case reminds us that our data has real value and needs real protection. When companies collect information about us, especially when we are young, it matters who controls that data and how it gets used.

Inspired by reporting from BBC News.