Children's Safety fines

Fifty-one state and territory attorneys general settled claims that Meta designed Instagram and Facebook to be addictive for minors, knowingly exposed young users to mental-health harm, and misled the public about how safe its platforms were. Meta will pay a guaranteed $12.1B over ten years, rising to $17.1B if other major social platforms agree to adopt the same safeguards.

New Mexico became the first US state to beat a major technology company at trial over harm to young people. A Santa Fe jury found that Meta made false or misleading statements about platform safety and engaged in unconscionable trade practices that exploited the inexperience of children, and the court then added a $567M remedial award on top of the $375M in civil penalties.

The DPC found that Instagram business accounts publicly exposed children's phone numbers and email addresses by default.

The Irish DPC found that TikTok set children's accounts to public by default and had weak age-assurance safeguards, exposing young users' content.

The FTC and the New York Attorney General alleged that YouTube collected personal data from viewers of child-directed channels through cookies, without parental consent, and used it for targeted advertising. It was a record COPPA penalty at the time.

Brazil's data-protection authority fined ByteDance for processing the personal data of children and adolescents without a valid legal basis, across both logged-in accounts and guest browsing, and for failing to stop minors from registering in the first place.

The FTC settled claims that Amazon kept children's Alexa voice recordings indefinitely, against COPPA and parents' deletion requests.