Meta to Pay $17B, Overhaul Child Safety in Landmark Privacy Settlement
Meta has agreed to pay $17 billion and implement sweeping reforms to its youth safety practices, settling a landmark civil case brought by nearly every U.S. state and territory over claims that Facebook and Instagram were designed to be addictive to children. The lawsuit, led by California, Colorado, Kentucky, and New Jersey, accused the social media giant of violating the federal Children’s Online Privacy Protection Act (COPPA) by collecting data from users aged 12 and under while relying on self-reported ages instead of facial recognition or other robust age verification methods. California Attorney General Rob Bonta called the payout "unprecedentedly high" and "way higher than opioids," though he emphasized that the structural reforms carry greater long-term significance than the fine itself.
Under the settlement, Meta must limit daily app usage to two hours for users under 18, block access between midnight and 6 a.m., and hide likes, reactions, and cosmetic surgery image filters from minors. The company is also required to provide a non-personalized feed free of algorithmic shaping, silence notifications to under-18 users from 10 p.m. to 7 a.m. and during school hours, and deploy a reporting tool that must resolve 90% of youth-submitted content complaints within 12 hours. An independent auditor with expansive data access will be embedded within Meta to monitor compliance, and the company is barred from making "false, misleading, or deceptive statements" about its safety features. For parents concerned about how platforms handle their children's data, running a privacy checkup can help identify exposed personal information across online services.
Jim Steyer, CEO of Common Sense Media, framed the settlement as "social media's Big Tobacco moment," signaling a shift in how courts and regulators approach platform accountability. Northwestern University law professor James Speta noted that Meta likely settled to avoid further losses after recent courtroom defeats in New Mexico and Los Angeles over similar harms, with parental anger over youth tech exposure making the status quo untenable. For security professionals tracking how data-collection practices evolve under new regulations, verifying exposure through an email breach checker remains a baseline step in any personal risk assessment. As enforcement tightens, Meta's concessions—from time limits to independent auditing—could become a template for how tech companies address child safety and consumer privacy in court-ordered settlements.