Meta’s $18 Billion Settlement Shields Kids’ Data Use for Age Checks
Meta's $18 billion settlement with 29 states permits limited use of children's data for age checks, while narrowing future state COPPA enforcement claims.
Summary
As of August 27, 2026, Meta’s settlement with attorneys general from 29 states requires up to $18 billion in payouts, new child safety measures, and development, training and initial testing of an age-assurance model within one year of the agreement’s effective date. The model must identify users under 13. Although AI is not required, Meta’s current age-detection tools use AI. Meta may retain and use children’s data solely for age assurance, not advertising, marketing or algorithmic optimization.
The states agreed never to bring past, present or future claims under the Children’s Online Privacy Protection Act, or similar state laws, over permitted age-assurance work, although the agreement says COPPA violations should be unnecessary. An independent auditor will monitor compliance, but the agreement does not specify what data Meta may retain, how much behavioral information it may include, how long storage may continue or how models may evolve. Blank Rome partner Philip N. Yannella called such compliance carve-outs typical, but noted that the Federal Trade Commission, COPPA’s primary enforcer, did not join the settlement. Schlam Stone & Dolan partner Joshua Wurtzel said states can sue if Meta exceeds the carve-out, though disputes would hinge on whether its conduct remained within the agreement. Greenberg Glusker attorney Peter Jackson warned the protection could discourage future enforcement. The case highlights a wider AI trade-off: accurate age detection and consumer agents may require extensive personal data, while technical isolation and enforceable limits remain difficult.
Positives
- Meta must begin testing an age-assurance model capable of identifying users under 13 within one year of the agreement’s effective date.
- Children’s data used for age assurance cannot support advertising, marketing or algorithmic optimization under the settlement.
- An independent auditor will monitor whether Meta isolates children’s data and complies with the settlement.
- States retain the ability to sue if Meta uses children’s data beyond the settlement’s defined age-assurance purpose.
Risks & concerns
- Attorneys general from 29 states waived past, present and future COPPA-related claims covering Meta’s permitted age-assurance data use.
- The agreement does not specify which children’s data Meta may retain, how much behavioral information it may contain or its retention period.
- The Federal Trade Commission, COPPA’s primary enforcer, is not part of the settlement, leaving its position on the carve-out unclear.
- Meta may struggle to keep children’s behavioral signals technically and organizationally isolated from advertising, optimization and other internal systems.
- Peter Jackson warned the covenant could discourage future enforcement, while disputes may turn on ambiguous boundaries around permitted data use.