The FTC's largest COPPA settlement did not require an admission

The test

On 27 February 2019 the operators of Musical.ly, by then rebranded as TikTok, entered a settlement with the FTC over alleged violations of the Children's Online Privacy Protection Act (COPPA). The FTC's own press release states the company agreed to pay $5.7 million, which it calls the largest civil penalty the Commission had obtained in a children's privacy case at that point. A companion FTC staff blog post adds detail on the underlying complaint.

What the evidence says

The FTC's own materials allege that Musical.ly did not ask users' ages for its first three years, then from July 2017 began screening new signups for under-13 users without applying that check to existing accounts. The complaint, as the FTC describes it, alleges the company had 'actual knowledge' it was collecting children's data: profiles showing dates of birth or school grades, and, in a single two-week span in September 2016, over 300 parent complaints asking for a child's account to be deleted. The FTC states the company failed to delete the associated videos and profiles even where accounts were removed. The settlement requires compliance changes and the payment; the release does not describe it as an admission of wrongdoing.

The sample and the variance

The FTC's release gives platform-scale figures for context, not as the violation count itself: more than 200 million downloads worldwide and 65 million US accounts, describing the app's reach rather than the number of under-13 users found in violation. The case is bounded to conduct through the app's 2017-era practices as Musical.ly; it does not describe TikTok's later product under ByteDance's ownership, which a separate 2024 DOJ and FTC complaint against TikTok addresses.

What to try next

A researcher tracing enforcement history should treat this 2019 settlement as the baseline consent order later cases reference, rather than as a closed, self-contained episode; the FTC's own 2024 complaint against TikTok explicitly alleges breaches of the order this settlement created. This is an editorial framing choice rather than a statement made in the 2019 documents themselves, which do not reference the later case.

• What specific compliance measures did the 2019 order require Musical.ly's operators to adopt, beyond the payment?
• Did TikTok publish its own account of how it changed under-13 detection after 2019?
• How does the $5.7 million 2019 penalty compare, in the FTC's own later releases, with penalties in subsequent children's-privacy cases?

A settlement fixes an amount and a set of required changes at a moment in time; whether those changes held up is a separate question this record does not answer, and one a later enforcement action was built to test.