TikTok's Record Fines for Violating Children's Privacy Laws

TikTok (and its predecessor Musical.ly) paid a $5.7 million FTC fine in 2019 — then the largest COPPA penalty — for collecting personal information from children under 13 without parental consent. In 2023, Ireland's DPC issued a €345 million fine after finding TikTok made children's accounts public by default and exposed their data through the 'Family Pairing' feature. According to reports, internal TikTok documents showed the company knew a significant percentage of its users were under 13 but failed to remove their accounts or restrict data collection. A 2024 DOJ lawsuit alleged TikTok continued collecting children's data in violation of COPPA despite prior enforcement.

tiktok has been the subject of increasing scrutiny over its children privacy practices. Privacy researchers and regulatory bodies across multiple jurisdictions have documented concerns about how the company handles user data, particularly regarding consent, transparency, and data minimization principles. The findings suggest a pattern of prioritizing business metrics over user privacy, a trend observed across the broader technology industry. Users affected by these practices have limited recourse without proactive intervention such as filing formal complaints with data protection authorities or submitting DSAR requests.

Regulatory responses have varied significantly. European data protection authorities have been more aggressive in enforcement under GDPR, while US enforcement remains fragmented across state-level privacy laws. The investigation highlights the need for stronger federal privacy legislation and more transparent corporate data practices. Affected users should consider reviewing their privacy settings, submitting data deletion requests, and exploring privacy-preserving alternatives recommended by independent researchers.