Meta’s $18 Billion Settlement Includes a Legal Shield for Kids' Data

The agreement mandates that Meta develop and test a system to detect users under the age of 13 within one year. While the company is explicitly barred from using this data for ad targeting or algorithmic optimization, the "fully, finally, and forever" waiver regarding COPPA-related claims creates a significant legal blind spot. By promising not to pursue past or future claims under federal and state child safety laws, the attorneys general have effectively granted Meta a unique exemption for its data collection practices.

Legal experts remain divided on the implications of this compromise. Philip N. Yannella of Blank Rome notes that such data minimization guardrails are standard, yet he questions whether the Federal Trade Commission—which is not a party to this agreement—will respect the states' decision. Others, like Peter Jackson of Greenberg Glusker LLP, warn that such carve-outs may disincentivize future enforcement, signaling a hasty negotiation process.

Compliance monitoring will fall to an independent auditor, a necessary step given the technical difficulty of keeping sensitive data isolated from Meta’s broader systems. Even so, the agreement leaves critical questions unanswered: exactly how much behavioral information will be retained, and how effectively can regulators police the boundary between legitimate model training and prohibited internal use? If Meta crosses those lines, the legal path to accountability remains murky, hinging on complex disputes over whether the company’s actions fall strictly within the settlement’s technical bounds.