Judge may block part of TikTok’s $400 million child privacy settlement

TikTok and ByteDance’s proposed $400 million settlement of allegations involving children’s privacy has encountered a hurdle in court. U.S. District Judge George H. Wu signaled that he may reject the provision that would terminate an oversight order imposed on Musical.ly, TikTok’s predecessor, in 2019. His position is not yet a final ruling: a hearing was scheduled for Monday, September 21.

The issue is narrower than rejection of the entire settlement. According to the U.S. Department of Justice, the proposal includes a $300 million principal payment and another $100 million if the court agrees to end the earlier order. In comments reported by Reuters, Wu said that without additional detail he could not determine whether the change would provide a durable remedy or whether it was properly tailored to current circumstances.

Why the 2019 order still matters

The oversight traces back to a Federal Trade Commission case against Musical.ly. In 2019, the company agreed to pay $5.7 million to resolve allegations that it knew young children used the app while collecting names, email addresses and other personal information without parental consent. The resulting order included compliance, reporting and recordkeeping obligations that remain in force through 2029.

The newer case grew out of a Justice Department lawsuit filed in 2024. The government accused TikTok and ByteDance of collecting children’s personal data and failing to protect users under 13, potentially violating the Children’s Online Privacy Protection Act, or COPPA. The law requires parental consent before covered services collect certain data from children younger than 13.

Allegations should be distinguished from established facts. The Justice Department’s own announcement says the complaint’s claims do not amount to a determination of liability. TikTok previously disputed the FTC’s conclusions and said the cited problems were old and had already been addressed. In filings connected to the settlement, the company also described controls that require users to enter a birth date and use age-related moderation to detect under-13 users who provide a false age. Those are company statements about its safeguards, not an independent validation of how effective they are.

Money and continuing oversight serve different purposes

The settlement’s conditional structure helps explain the judge’s caution. A financial penalty punishes alleged conduct and resolves part of a dispute; an oversight order creates duties that continue after money changes hands. Replacing obligations that would otherwise last another three years with an additional payment requires evidence that current controls offer comparable or stronger protection.

The government argues that ownership, management, compliance and privacy practices have changed significantly since 2019. The concern indicated by the court is whether those changes have been documented precisely enough to justify ending the order early. The hearing is therefore likely to focus on that comparison, not simply on the size of the announced payment.

The dispute also illustrates the two layers common in privacy settlements: financial resolution and future enforcement. The $400 million figure dominates the headline, but the question with the longer-lasting effect is who will monitor compliance, and under which obligations, through 2029. Until the court rules, the settlement should be described as proposed and the possible rejection as a judicial signal rather than a final outcome.