Four hundred million dollars is a number that stops you. When the US Department of Justice announced that TikTok and its Chinese parent company ByteDance had agreed to pay that sum to settle a federal lawsuit over children's privacy, it instantly became one of the largest penalties ever imposed for such violations — and a signal that Washington's patience with the data habits of social media giants has run dry. The lawsuit, filed in 2024 under the Biden administration, alleged that TikTok had collected vast quantities of personal data from users younger than thirteen, in clear breach of the Children's Online Privacy Protection Act — known as COPPA — a federal statute that has been on the books since 2000. At the time the case was brought, US attorneys estimated that more than 170 million teenagers were using the platform.

TikTok, prosecutors argued, neither adequately verified users' ages nor sought the parental consent that the law required. Under the settlement's terms, $300 million will be paid to the government immediately, with a further $100 million due once an earlier consent decree with the Federal Trade Commission is formally vacated. TikTok is not alone in the dock. YouTube paid $170 million for similar violations in 2019, and Epic Games followed with a $275 million settlement in 2022.

Meta, which owns Instagram and Facebook, is now fighting a jury trial brought by the attorneys general of 29 US states, with potential penalties that legal analysts suggest could run into the hundreds of billions of dollars. What makes this moment significant is not merely the size of the fine, but what it reveals about a structural tension at the heart of the attention economy: platforms whose business model depends on keeping young users engaged are now being held legally accountable for knowing — and acting on — exactly how young those users actually are.