What happened
The U.S. Department of Justice announced that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit brought jointly with the FTC alleging the platform violated the Children's Online Privacy Protection Act (COPPA). The complaint accused TikTok of knowingly letting children under 13 open accounts, unlawfully collecting data from users in "Kids Mode," and ignoring parental requests to delete children's accounts and data. TikTok will pay $300 million immediately and the remaining $100 million once a prior consent decree tied to its Musical.ly-era practices is formally vacated. Separately, a new free service called DecryptAds launched this week, correlating the ads.txt, app-ads.txt, buyers.json, and sellers.json disclosure files that publishers must maintain to show exactly which ad networks and data brokers are active on any given site.
Why it matters for your business
The settlement is one of the largest COPPA recoveries on record and a reminder that any business collecting data from users who could plausibly be minors — schools, family-facing apps, hobby communities — carries real regulatory exposure, not just reputational risk. DecryptAds is separately useful for any business running display ads or an ad-supported product: it can surface unexpected or low-quality ad partners loading on your own site, including networks tied to ad fraud or foreign state actors, which is worth checking even if you're not the one selling the ad inventory.
What to watch next
Expect other platforms with youth-heavy audiences to face similar COPPA scrutiny now that the DOJ has set a nine-figure benchmark. On the adtech side, expect more publishers and researchers to run their own sites through DecryptAds now that a supply-chain transparency tool like it is free and public.