On September 18, 2026, US District Judge George H. Wu issued a 16-page tentative ruling in United States v. Musical.ly (2:19-cv-01439-GW-RAO) saying he will deny, without prejudice, the government's unopposed motion to vacate the 2019 consent order against TikTok's predecessor. A hearing is set for September 21. The ruling matters well beyond one company, because it tests a question regulators rarely face: can an agency trade away its own oversight tools in exchange for a payment?
The deal and the condition
On August 21, 2026, the Justice Department announced a $400 million settlement with TikTok and ByteDance to resolve the 2024 children's-privacy litigation under the Children's Online Privacy Protection Act (COPPA). TikTok pays $300 million immediately and a further $100 million only upon entry of an order vacating the earlier consent decree against Musical.ly.
That earlier order dates to February 2019, when the FTC announced a $5.7 million settlement, then the largest civil penalty the Commission had obtained in a children's privacy case. The court entered the stipulated order on March 27, 2019. According to PPC Land's reading of the tentative ruling, it includes a permanent COPPA injunction plus recordkeeping, reporting and monitoring provisions, some of which run to 2029.
The strongest case for the government
The government's position is not frivolous. Consent decrees are supposed to be temporary tools, not permanent supervision, and an agency that has just extracted $400 million, one of the largest COPPA recoveries ever according to DOJ, has a reasonable claim that deterrence has been served. TikTok has also changed its product, adding age-gating that asks for a date of birth. Executive-branch officials, not judges, ordinarily decide where enforcement resources go, and a decree that outlives the company's ownership structure and practices can look like regulatory overhang.
Why Judge Wu was unpersuaded
According to the reported ruling, Wu rejected each of the government's changed-circumstances arguments in turn.
- Ownership change. COPPA applies regardless of whether a company is domestic or foreign owned, and the 2019 order already anticipated corporate changes through successors-and-assigns language and a ten-year notice requirement.
- Platform changes. Wu accepted that TikTok added age-gating but wrote that "a commitment to comply is not the same as having demonstrated actual compliance." He noted the 2024 complaint alleged children still evaded gates, and that TikTok had age-estimation technology it did not use to identify underage users.
- The payment. Civil penalties deter, he reasoned, but "a monetary payment does not, without more, establish that those mechanisms are no longer necessary." Reporting and monitoring provisions detect violations; money cannot do that job.
He also rejected the government's reliance on the deferential standard from SEC v. Randolph (1984), citing Rufo v. Inmates of Suffolk County Jail (1992): on whether changed circumstances justify modification, "no deference is involved." And he noted that the settlement agreement itself was never filed with the court, only announced in a press release. In his words, it is "totally unclear" whether it removes the need for the decree's protections.
What this means for proportionate regulation
A pro-innovation stance does not mean minimal enforcement; it means enforcement that is predictable, targeted and evidence-based. On those terms, the ruling is more defensible than it first looks. The decree's obligations are narrow: keep records, report on deletion, tell regulators about corporate changes. They are cheap for a compliant company and valuable to anyone trying to verify that it is one. A company confident in its age-assurance systems should welcome a documented way to prove it.
The better critique is aimed at the government's structure. Tying $100 million to the removal of oversight creates an incentive for both sides to treat monitoring as a bargaining chip. Oversight then gets priced like a fee rather than justified by evidence. Wu's ruling effectively says that trade needs a record, and "without prejudice" tells the parties how to build one: file the settlement, show measured compliance, or propose narrower relief instead of full termination.
There is also a lesson for the wider children's privacy debate. Proposals for age verification mandates often assume that technology adoption equals protection. The ruling's distinction between having a tool and demonstrating its results is the right test for any age-assurance regime, and it cuts against both under-enforcement and mandates that are never checked. The FTC, which enforces COPPA and finalised rule amendments in January 2025 to limit monetisation of kids' data, relies on exactly these audit trails.
What to watch on September 21
The judge may adopt the tentative ruling, modify it, or take the matter under submission. If it is adopted, the government can refile with the settlement terms and compliance evidence. Whether TikTok owes the last $100 million then depends on terms that remain unfiled. If the announcement is accurate, that payment now hangs on an order the court has said it is not prepared to enter.
The practical takeaway for platforms is that a settlement cannot buy an exit from oversight on assertion alone. For regulators, it is that a durable remedy is one you can show works, and that showing is what keeps enforcement credible and proportionate.