[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4yzRwwYVVoTZHQZ9LMFhY90LoG12fdb-RScsGDHhxU0":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":53},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"09d7a985-4676-421d-9989-0711961c0185","TikTok reaches $400M settlement with US over COPPA violations","tiktok-reaches-400m-settlement-with-us-over-coppa-violations-a00e8a","The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act (COPPA). [...]","TikTok, ByteDance, and affiliated companies have reached a $400 million settlement with the U.S. Department of Justice over alleged violations of the Children's Online Privacy Protection Act (COPPA). The lawsuit claimed TikTok knowingly allowed underage children to create regular accounts, collected their data without consent, and failed to remove it upon request, despite a previous settlement in 2019. The settlement acknowledges TikTok's significant changes in ownership, data management, and compliance operations.","TikTok agrees to $400M settlement with US over COPPA violations.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Flegal\u002Ftiktok-reaches-400m-settlement-with-us-over-coppa-violations\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2025\u002F05\u002F02\u002FTikTok.jpg","2026-08-24T17:56:24+00:00","2026-08-24T18:00:05.383159+00:00",7,[17,20,23],{"name":18,"type":19},"TikTok","product",{"name":21,"type":22},"ByteDance","vendor",{"name":24,"type":19},"Musical.ly","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":25,"icon":27,"name":28,"slug":29},null,"Policy","policy",[31,36,41,43],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":37},{"id":38,"icon":27,"name":39,"slug":40},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":42},{"id":25,"icon":27,"name":28,"slug":29},{"category":44},{"id":45,"icon":27,"name":46,"slug":47},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[21,18,24],{"controls":51,"vendors":52},[],[],{"slug":54,"title":55,"body":56,"framework_refs":57,"framework_notes":68},"tiktoks-400m-coppa-settlement-a-costly-lesson-in-childrens-data-privacy","TikTok's $400M COPPA Settlement: A Costly Lesson in Children's Data Privacy","TikTok knowingly permitted underage users to create accounts and collected their personal data without parental consent, in direct violation of the Children's Online Privacy Protection Act (COPPA). Critically, this occurred even after a prior 2019 settlement had already put the company on notice, demonstrating a failure to embed compliance into core product and data operations. This matters because repeated violations signal systemic gaps in regulatory governance, age-verification controls, and data lifecycle management rather than isolated oversights. A $400 million penalty reflects both the scale of harm and regulators' intent to hold platforms accountable for protecting vulnerable populations online.",[58,59,60,61,62,63,64,65,66,67],"COPPA (15 U.S.C. §§ 6501–6506)","GDPR Article 8 – Conditions applicable to child's consent","GDPR Article 17 – Right to erasure ('right to be forgotten')","NIST Privacy Framework PR.DS-P1 – Data processing policies","NIST SP 800-53 PT-2 – Authority to Process Personally Identifiable Information","NIST SP 800-53 AC-2 – Account Management","CIS Control 3 – Data Protection","CIS Control 14 – Security Awareness and Skills Training","ITIL – Service Design: Compliance and Risk Management","FTC Act Section 5 – Unfair or Deceptive Acts or Practices",{}]