[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMKVOi7rpIkArv5yOBDksBa55oOgC57S88R1-U9DC97E":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":59},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"2b11b8a6-bc73-4206-96d0-9dfde2f5199d","TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy","tiktok-reaches-400-million-settlement-with-us-justice-department-over-children-s-e51fe0","TikTok will pay $300 million immediately and another $100 million after an order vacates an earlier consent decree against its predecessor company, Musical.ly. The post TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy appeared first on SecurityWeek.","TikTok has agreed to pay $400 million to the U.S. Justice Department to settle a lawsuit alleging violations of federal children's privacy laws. The settlement includes an immediate payment of $300 million and an additional $100 million pending the vacation of an earlier consent decree against its predecessor, Musical.ly. The lawsuit focused on allegations that TikTok and ByteDance illegally collected personal information from children under 13 without parental consent and failed to delete accounts upon request.","TikTok agrees to a $400 million settlement with the US Justice Department over children's privacy violations.","https:\u002F\u002Fwww.securityweek.com\u002Ftiktok-reaches-400-million-settlement-with-us-justice-department-over-childrens-privacy\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F05\u002FTikTok-China-Access-Risks.jpg","2026-08-24T09:11:11+00:00","2026-08-24T10:00:05.561558+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"TikTok","product",{"name":21,"type":22},"ByteDance","vendor",{"name":24,"type":22},"Musical.ly",{"name":26,"type":22},"Oracle",{"name":28,"type":22},"Silver Lake",{"name":30,"type":22},"MGX","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":31,"icon":33,"name":34,"slug":35},null,"Policy","policy",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[26,21,24],{"controls":57,"vendors":58},[],[],{"slug":60,"title":61,"body":62,"framework_refs":63,"framework_notes":73},"tiktoks-400m-fine-a-costly-lesson-in-childrens-privacy-compliance","TikTok's $400M Fine: A Costly Lesson in Children's Privacy Compliance","TikTok and its predecessor Musical.ly systematically failed to comply with the Children's Online Privacy Protection Act (COPPA) by collecting personal data from children under 13 without obtaining verifiable parental consent and neglecting to delete accounts upon parental request. This case highlights that privacy violations targeting minors carry dramatically elevated regulatory and financial risk, as regulators treat children's data as a specially protected category requiring explicit safeguards. The $400 million settlement — one of the largest COPPA penalties in history — demonstrates that regulators are willing to pursue sustained enforcement even across corporate acquisitions and rebrandings. Organizations that inherit platforms through mergers and acquisitions must audit inherited privacy obligations immediately, as legal liability transfers with the product.",[64,65,66,67,68,69,70,71,72],"COPPA (15 U.S.C. § 6501–6506)","GDPR Article 8 – Conditions applicable to child's consent","GDPR Article 17 – Right to erasure ('right to be forgotten')","NIST Privacy Framework PR.DP-4 (Data Processing Policies)","NIST SP 800-188 – De-Identifying Government Datasets","CIS Control 3 – Data Protection","CIS Control 14 – Security Awareness and Skills Training","ITIL Service Design – Compliance Management","ISO\u002FIEC 27701 – Privacy Information Management System (PIMS)",{}]