PrivacySignal
Enforcement

TikTok to pay $400m to US in one of largest child privacy settlements

BBC — Tech · · International · Enforcement

TikTok and its parent company ByteDance have agreed to pay $400 million to settle a U.S. lawsuit alleging they collected extensive data on children under 13. The case, filed in 2024, is one of the largest child privacy settlements on record.

Why this matters: Children under 13 have specific legal protections online for a reason. Their data should not be harvested at scale. A $400 million settlement sounds large, but for a company the size of ByteDance it is a cost of doing business, not necessarily a reason to change behavior. The real test is whether regulators follow this with enforcement that actually changes how platforms treat children's data, not just how much they pay when they get caught.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
BleepingComputer · · International

IQVIA fined $7.8 million for failing to properly anonymize health data

Italy's data protection authority fined IQVIA €7 million after finding that the company's anonymization practices were inadequate, leaving roughly one million patients at risk of being re-identified from their health data.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals · AI governance · General readers · Policy

#enforcement#healthcare#gdpr#privacy Read original →
Enforcement
DataBreaches.net · · International

South Korea’s President Lee Jae Myung orders thorough probe into data breaches at local banks

South Korean President Lee Jae Myung has ordered a formal investigation into a recent series of data breaches at financial and public institutions, amid growing concern about AI-powered cyberattacks targeting the sector.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#ai Read original →
Enforcement
C CT Mirror · · International

Data privacy lawsuit, subsidies for childcare staff: CT politics news

A data privacy lawsuit is among the political stories making news in Connecticut, alongside a separate measure involving subsidies for childcare workers. Details on the parties, claims, and current status of the lawsuit were not provided.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
T Top Class Actions · · International

$3.5M MDLive data privacy class action settlement

MDLive, a telehealth company, has agreed to a $3.5 million settlement to resolve a class action lawsuit over alleged data privacy violations.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →