Lindsay Clancy was suffering 'command hallucination' when she killed her kids, says psychiatrist

On Friday, August 21, 2026, the United States Department of Justice announced that it had reached a $400 million settlement with TikTok, ByteDance, and affiliated entities to resolve a lawsuit first filed under the Biden administration in 2024 alleging systematic, knowing violations of federal law designed to protect children's online privacy. The settlement — which the DOJ describes as one of the largest recoveries ever obtained in a case brought under the Children's Online Privacy Protection Act — closes a legal action that has followed TikTok across two presidential administrations, through an ownership restructuring under which the app's US operations were migrated to Oracle's cloud infrastructure, and through a period in which TikTok simultaneously fought for its right to continue operating in the United States and conducted the compliance reforms that ultimately made settling more attractive than prolonged litigation.

It is the second major privacy settlement in TikTok's American legal history, following a $92 million settlement in 2021 resolving a cluster of class-action lawsuits over biometric data and general privacy violations. The 2026 settlement dwarfs that previous agreement by a factor of more than four, reflecting both the scale of the violations alleged and the federal government's significantly elevated appetite for COPPA enforcement following years of documented failures by major platforms to protect children's online safety.

The payments are structured across two tranches. TikTok will pay $300 million immediately upon finalisation of the settlement. The remaining $100 million becomes payable upon the vacating of the prior consent decree that governed the conduct of Musical.ly — the Chinese lip-sync app that ByteDance acquired in 2017 and rebranded as TikTok. The Musical.ly consent decree has been the legal foundation for the government's continued authority to monitor TikTok's compliance practices, and its vacating marks the formal dissolution of that oversight relationship in favour of the new settlement's terms. The two-tranche structure incentivises TikTok's continued compliance: until the Musical.ly decree is formally dissolved, the remaining $100 million sits as both a financial obligation and an institutional reminder that the relationship between TikTok and US regulators is not fully concluded.

The original lawsuit, filed in the US District Court for the Central District of California in 2024, alleged conduct spanning multiple categories of COPPA violation that painted a detailed picture of systematic institutional failure to honour the legal protections that the 1998 statute requires for children under 13. The core of COPPA is simple in its design and demanding in its implementation: websites and online services directed at children must obtain verifiable parental consent before collecting, using, or disclosing personal information from users under 13. When a service knows or has reason to know that it has users under 13, the same requirement applies regardless of whether the service was designed with children in mind. TikTok, whose short-video format, algorithmically curated feeds, trending sounds, and influencer culture generate enormous appeal among children of middle school age and below, was alleged in the lawsuit to have known for years that millions of its American users were under 13 and to have taken systematic steps that fell far short of the parental consent and data protection requirements the law demands.

The specific violations alleged went beyond a simple failure to check ages at registration. The DOJ's complaint, building on a referral from the Federal Trade Commission, accused TikTok of knowingly permitting children to create regular TikTok accounts — not the Kids Mode product designed for under-13 users with restricted features and data collection, but the standard unrestricted platform used by adults — and of allowing those children to create, view, and share short-form videos and messages with adults and the general public. Children's data, including geolocation information, were collected without the parental consent COPPA requires. When parents or guardians requested deletion of their child's account and data — a right COPPA explicitly provides — TikTok made the process unnecessarily difficult, sometimes requiring multiple requests before acting, and failed to implement systems ensuring that children whose data was deleted could not simply re-register with identical information to recreate an account. The platform also failed to delete data that should have been deleted under COPPA's requirements even when deletion requests were processed.

The government was also alleged to have discovered violations in the operation of TikTok's Kids Mode product itself. Kids Mode was presented to parents as a restricted, safe environment specifically designed for children under 13, and parents were asked to provide consent on that basis. But the DOJ alleged that Kids Mode was itself collecting personal information in ways that exceeded the disclosure parents were given when they provided consent — meaning that even the product designed to comply with COPPA was doing so inadequately.

None of these violations, taken individually, are unusual in the landscape of platform noncompliance with children's privacy law. What distinguished TikTok's situation, and what is reflected in the $400 million settlement figure, is the combination of scale, duration, and what the government characterised as knowing disregard for the law's requirements. COPPA penalties can run as high as tens of thousands of dollars per violation per day, and across a user base of hundreds of millions with millions of underage users whose data was collected over multiple years, the aggregate potential liability was theoretically in the hundreds of millions to billions of dollars — a range that the $400 million settlement both reflects and substantially discounts in recognition of the compliance changes TikTok implemented during the litigation.

Those compliance changes are, in the DOJ's formal analysis, a significant part of why the case settled rather than going to trial. Since the 2024 filing, TikTok has undergone what the department described as "significant changes to its ownership, management, compliance functions, and privacy practices." The migration to Oracle's cloud, completed under the framework of the deal that kept TikTok operational in the United States after the Biden-era divestiture legislation and the Trump administration's subsequent handling of the divestiture deadline, involved the restructuring of data access and storage in ways that meaningfully changed TikTok's relationship with ByteDance's China-based operations. New privacy leadership was installed. Compliance functions were enhanced. Age verification and parental consent mechanisms were strengthened. The Kids Mode product was redesigned. The DOJ's formal settlement statement assessed that these changes had "materially advanced the public interests underlying" the original lawsuit and "strengthened protections for millions of American families."

Associate Attorney General Stanley Woodward Jr. called the settlement a "major victory for American children and parents" and described it as delivering "practical results for families by maintaining stronger protections for children without the additional delays and uncertainty associated with prolonged court proceedings." The language is the standard framing for a settlement that the government believes is a reasonable outcome — acknowledging that a trial would have taken years, that TikTok's compliance investments during litigation had partially addressed the underlying harm, and that $400 million in the Department of Justice's enforcement account, combined with binding new requirements on TikTok's operations, serves the public interest better than the uncertainty of a verdict years away.

Assistant Attorney General Brett A. Shumate of the DOJ's Civil Division added that "companies that collect children's personal information must comply with the law" — a statement that functions simultaneously as a summary of the case's legal theory and as a warning to other platforms watching the settlement's outcome. The COPPA enforcement landscape in 2026 is meaningfully more aggressive than it was when the law was enacted in 1998, and the trajectory of enforcement actions — from the Federal Trade Commission's early civil penalty proceedings through the 2019 consent decrees and 2024 lawsuits against multiple platforms to Friday's landmark settlement — demonstrates sustained federal commitment to treating children's online privacy as a real and enforceable legal obligation rather than a theoretical aspiration.

TikTok settled without admitting wrongdoing, the standard position in civil settlements of this kind and one that carries no legal significance for future proceedings but considerable importance for the platform's public communications. The company did not issue an extensive public statement characterising the settlement as an admission of the government's allegations. Its compliance investments, its new management, and the ownership restructuring are the narrative it would prefer to dominate coverage of this outcome. For parents and child safety advocates, whether those changes are sufficient — whether the compliance culture at TikTok has fundamentally changed rather than merely improved its documentation of compliance — is a question that the settlement's monitoring provisions and future enforcement actions will eventually answer.

COPPA itself is 28 years old, enacted at a moment when the internet was accessed primarily through desktop computers and the services most threatening to children's privacy were online message boards and rudimentary social networks whose capabilities bore no resemblance to the algorithmically sophisticated, immersive, attention-engineered platforms that characterise 2026's social media landscape. Its core framework — parental consent before data collection from under-13 users — remains sound in principle, but the practical challenge of enforcing it across platforms whose entire design philosophy is built around maximising engagement time and data collection, and whose algorithms are explicitly optimised to identify and retain users who show high engagement patterns — patterns that children characteristically display — has stretched the law's implementation to its limits repeatedly across the past decade.

The $400 million settlement is a significant financial consequence. It is also, in the context of ByteDance's global revenues, a manageable one — ByteDance reported revenues in the hundreds of billions of yuan in recent years, and TikTok's US operation alone generates advertising revenue well into the billions of dollars annually. The settlement's practical deterrent effect will depend less on its dollar amount and more on the behavioural changes the compliance regime it embeds produces and the signal it sends to TikTok's competitors about the government's willingness to pursue large-scale COPPA enforcement.

The children whose data was collected without parental consent, whose accounts were created in violation of the law, and whose personal information circulated through systems that COPPA was specifically designed to protect, are not individually compensated by this settlement. The $400 million flows to the federal government as a civil penalty rather than to the families affected. Whether individual restitution for affected children is achievable through separate civil litigation or through future legislative mechanisms is a question that the settlement does not resolve. What it resolves is the federal government's own enforcement action, and it does so with a number and a set of remedial commitments that the DOJ's senior leadership is describing as a major victory. The families who trusted TikTok with their children's attention and data will make their own assessment of that description.

Sources

1. Axios — Scoop: DOJ, TikTok Settle for $400 Million in Children's Privacy Suit — https://www.axios.com/2026/08/21/doj-tiktok-biden-lawsuit-settlement
2. TechCrunch — TikTok Reaches $400M Settlement Over Children's Privacy Lawsuit — https://techcrunch.com/2026/08/21/tiktok-reaches-400m-settlement-over-childrens-privacy-lawsuit/
3. Al Jazeera — TikTok Settles With US Justice Department for $400m Over Child Privacy Laws — https://www.aljazeera.com/economy/2026/8/21/tiktok-settles-with-us-justice-department-for-400m-over-child-privacy-laws
4. Washington Times — TikTok Settles $400 Million Children's Privacy Lawsuit — https://www.washingtontimes.com/news/2026/aug/22/tiktok-settles-400-million-childrens-privacy-lawsuit/
5. Bloomberg — TikTok to Pay $400 Million to Settle DOJ Child Privacy Lawsuit — https://www.bloomberg.com/news/articles/2026-08-21/tiktok-to-pay-400-million-to-settle-doj-child-privacy-case
6. American Bazaar Online — TikTok Agrees to $400 Million Settlement in Major Children's Privacy Case — https://americanbazaaronline.com/2026/08/22/tiktok-agrees-to-400-million-settlement-in-major-childrens-privacy-case-486871/
7. US Department of Justice — Justice Department Announces $400 Million Settlement with TikTok and ByteDance Resolving Children's Online Privacy Violations — https://www.justice.gov/opa/pr/justice-department-announces-400-million-settlement-tiktok-and-bytedance-resolving-childrens