The Justice Department’s recent $400 million settlement with TikTok has raised eyebrows beyond its headline figure, particularly over unaddressed claims concerning the security of American user data. While the settlement was framed as a resolution of child-safety concerns, it appears to omit allegations that employees in China could access sensitive information from U.S. users.

According to a former Federal Trade Commission official, there was substantial evidence uncovered that TikTok’s internal messaging system allowed access to crucial personal details, including Social Security and bank account numbers. This disturbing claim, however, was absent from the DOJ’s suit, which primarily focused on privacy violations related to children under 13.

Of the $400 million, a considerable $300 million directly targets these child-privacy claims. But the remaining $100 million served a different purpose: it terminated a 2019 consent order mandating ongoing, independent oversight of TikTok’s data practices.

This latter component has drawn sharp criticism from advocates of online safety. Haley Hinkle, policy counsel for the online safety organization Fairplay, expressed disapproval, stating, “The DOJ’s settlement with TikTok places the company under no new obligations.” She emphasized the concerning nature of relieving TikTok from prior compliance requirements.

Former FTC chairman Bill Kovacic also highlighted the unusual nature of the settlement. He remarked, “If this were a math exam, show your work.” Kovacic noted that the public typically deserves transparency regarding how such settlement figures are reached.

However, a senior DOJ official offered a defense of the deal, suggesting that TikTok has significantly changed since the lawsuit was originally filed. “The TikTok that we settled with in this case was not the same company that the lawsuit was brought against,” the official elaborated.

The timing of the settlement announcement, made on a Friday afternoon, coincides with a common strategy used to minimize media coverage. This lack of transparency has only intensified scrutiny over the implications of the agreement.

This settlement arrives amid significant corporate restructuring for TikTok, which has recently seen Oracle — co-founded by Trump ally Larry Ellison — and other U.S. investors gain control, while the Chinese parent company ByteDance retains a minority stake.

Experts have underscored the gravity of the allegations that weren’t included in the settlement. The potential breach of American users’ personal data amid increasing scrutiny of TikTok’s connection to China raises serious questions about the company’s compliance with privacy regulations.

The settlement essentially emerges as a compromise that many believe neglects more pressing issues regarding data privacy and security. Critics argue that the absence of stricter guidelines may encourage less accountability moving forward.

As the DOJ faces criticism for a perceived lack of rigor, lawmakers and digital safety advocates are calling for clearer policies to safeguard against foreign access to American data.

Without the constraints of the 2019 consent order, some believe TikTok may operate with greater impunity when it comes to protecting user information.

While the settlement may relieve TikTok of immediate legal pressures, it adds to existing concerns about the platform’s commitment to user privacy amid ongoing data security issues.

Despite the settlement, many stakeholders hope that this controversy triggers more rigorous oversight and legislation aimed at ensuring digital safety. The conversation around TikTok has reignited calls for action against companies that may mishandle user data.

As concerns over data security persist, eyes remain on TikTok to see how the company will adapt its practices to address both regulatory scrutiny and public trust.

With these developments in mind, the future remains uncertain, leaving much to be resolved about user security in the face of evolving corporate practices and government regulations.

As the story unfolds, it will be crucial for politicians, regulators, and the public to hold tech companies accountable, ensuring that privacy and safety are not compromised in pursuit of profits.

This settlement serves as a reminder of the delicate balance between innovation, user privacy, and security, a balance that many hope will be prioritized as digital landscapes evolve.