TikTok settlement of $400M: what changes for marketing

The timeline: from COPPA to $400 million

In 2024, the U.S. Department of Justice initiated legal action against TikTok. The accusation was clear: the platform had violated the Children’s Online Privacy Protection Act (COPPA). This federal regulation prohibits the collection of personal data from children under 13 without verifiable parental consent.

According to the accusation, TikTok allegedly collected geolocation, behavior, and preference data from minors. Furthermore, it allegedly allowed them to create accounts without adequate age verification. All this while the platform grew to become one of the most relevant advertising channels in the world.

In August 2026, as reported by TechCrunch , TikTok agreed to a settlement for $400 million . This is a figure that exceeds the previous record of $170 million paid by Google in 2019 for a similar breach on YouTube. Therefore, the signal sent to the markets is unequivocal.

Winners, losers, and market positions

In any settlement of this magnitude, it's worth identifying who comes out stronger and who, instead, suffers the greatest consequences. So, let's try to do this analysis with a strategic eye.

Who loses ground

TikTok suffers significant reputational damage. Despite this, the direct financial damage is manageable for a company of its size. The deeper problem is structural: the platform will have to introduce more robust age verification systems. This could reduce the young user base, which is its main competitive asset.

Similarly, brands that have built awareness strategies on very young audiences find themselves in a delicate position. Particularly those operating in sectors like gaming, young fashion, food, and entertainment. Consequently, their targeting may become less precise and more expensive.

Who gains ground

Instagram and YouTube, paradoxically, could benefit from advertisers' increased caution towards TikTok. However, even these platforms are not immune to similar risks. In fact, regulatory pressure is extending to the entire social media ecosystem.

Also, companies specializing in age verification and consent management see demand for their services grow. The tech compliance market is one of the few to directly benefit from these events.

SHM Studio's reading: beyond the fine

We at SHM Studio we believe this settlement represents a turning point. It's not just a penalty for a single platform. It's a regulatory signal that anticipates a season of greater rigor across all of digital advertising.

The American COPPA has a European counterpart in Article 8 of the GDPR, which regulates the processing of minors' data. Furthermore, the European Digital Services Act (DSA) introduces specific obligations for platforms with young audiences. Therefore, Italian marketing managers cannot consider this case as exclusively an American issue.

Compliance becomes a core competency of the marketing team, not a responsibility that can be delegated solely to the legal department.

In particular, those managing campaigns on Digital marketing with a potentially mixed audience needs to review its segmentation processes. This applies to both B2C and, to a growing extent, B2B with consumer-adjacent products.

Operational implications for Italian brands on TikTok

The concrete question marketing managers are asking themselves is: what changes in daily practice? Let's try to answer precisely.

Review of targeting and custom audiences

First of all, you need to check the targeting settings of active campaigns on TikTok. The platform already excludes those under 13 from ad targets. However, the 13-17 age group requires specific attention. In fact, some product categories cannot be advertised to this age group.

Therefore, those who use google ads campaigns in parallel to TikTok should verify the consistency of targeting policies between the two platforms. Similarly, campaigns Linkedin — by nature oriented towards an adult and professional audience — are less exposed to these risks.

Audit of data collected via pixels and forms

The TikTok Pixel collects behavioral data from users who visit the advertiser's site. Consequently, if the site receives traffic from minors, it's necessary to verify that consent is collected correctly. This also applies to lead generation forms integrated into campaigns.

Following the implementation of the DSA, European platforms have already introduced additional restrictions. However, the responsibility for the correct use of data remains with the advertiser. Therefore, an audit of the consent management is an immediate priority.

Creative content review

In addition to targeting, creative content is also under scrutiny. In fact, messages that may be attractive to minors — even if not explicitly aimed at them — can create regulatory exposure. Therefore, reviewing copy and visuals is an integral part of a compliance strategy.

Those who use professional copywriting has an advantage: it can integrate compliance verification directly into the creative process, without slowing down production times.

The regulatory framework is still wide open

The TikTok settlement doesn't close the debate: it opens it up further. In fact, several US states have already introduced laws more restrictive than the federal COPPA. Among these, California with its Age-Appropriate Design Code , inspired by the British law of the same name.

In Europe, the process is similar. The European Commission is considering additional measures under the DSA to protect minors online. Companies that anticipate compliance — instead of reacting to sanctions — build a competitive advantage in terms of consumer trust.

Therefore, the question is not whether to comply, but when and how. Anyone managing a integrated digital strategy must consider privacy by design as a project requirement, not an afterthought.

Next moves: what to do in the next 90 days

In summary, here are the operational priorities that we at SHM Studio we recommend Italian marketing managers who operate on TikTok and social platforms with a young audience.

• Active targeting audit: verify that no campaign reaches minors under 13 and that campaigns targeting 13-17 year olds comply with category policies.
• Review of consent management: update the cookie banner and data collection forms to ensure verifiable consent in line with GDPR and DSA.
• Mapping of data collected via pixels: identify what data is transmitted to TikTok and verify the legal basis for processing.
• Marketing team training: integrate privacy update modules into internal processes, especially for those managing social campaigns.
• Channel mix evaluation: consider whether TikTok's weight in the media mix is appropriate relative to the target profile and emerging regulatory risks.

Finally, those who wish for an in-depth analysis of their regulatory exposure in digital advertising can contact the SHM Studio team for dedicated consulting. Furthermore, on the SHM Studio blog continuous insights on regulations, platforms, and strategies are available SEO and AI applied to marketing .