TikTok Agreed to Pay $400M. Meta Was Ordered to Pay $567M More. Penalties Are a Capital Item Now, Not a Legal Line.

TLDR: Platform penalties now arrive as multi-year, bonded, remedy-laden obligations the size of capital projects, so boards should provision and stress-test them inside capital allocation, next to capital expenditure.

One state case reached $942 million and one children’s privacy settlement $400 million in the same August fortnight

On 6 August 2026 the First Judicial District Court in Santa Fe entered judgment against Meta Platforms in State of New Mexico ex rel. Torrez v. Meta Platforms. The case ran in two phases. A jury sitting from 2 February to 24 March 2026 found 75,000 violations of the Unfair Practices Act at the $5,000 maximum each¹, a civil penalty of $375 million that the state announced as its landmark verdict² in March. A bench trial in May then considered the state’s public nuisance claim, and the judgment orders Meta to deposit $567 million into an abatement fund on top of the jury award. The New Mexico Department of Justice presents the two together as a $942 million outcome³.

The two numbers are different instruments. The $375 million is a penalty. The $567 million is equitable relief: under the New Mexico public nuisance statute the remedy is abatement, and the court sized the fund by costing what it takes to abate the harm. It allocates $420 million to treatment, $90 million to screening and assessment, $33 million to awareness and prevention, $15 million to referral and coordination and $9 million to implementation and evaluation. The state’s expert proposed a 15-year programme; the court cut the spending window to five years, which is why the figure stops at $567 million.

Fifteen days later the Department of Justice announced a $400 million settlement with TikTok and ByteDance⁴ over the Children’s Online Privacy Protection Act (COPPA). The case began when the Federal Trade Commission (FTC) referred its complaint to the Department of Justice in August 2024⁵, alleging breaches of a 2019 order against Musical.ly, TikTok’s predecessor, and noting that the FTC Act allows civil penalties of up to $51,744 per violation, per day. Five days after that, on 26 August, Meta settled with 52 attorneys general for a minimum of $12.1 billion and up to $17.1 billion⁶. Three child-safety outcomes in three weeks came to more than $13 billion at their floor.

Exhibit 1. Two August 2026 child-safety matters: the headline is one line of a multi-year obligation

Term	TikTok and ByteDance (COPPA)	Meta (New Mexico)
Forum	US District Court, Central District of California; settlement with the Department of Justice	First Judicial District Court, Santa Fe; jury verdict plus bench judgment
Amount	Up to $400 million	$942 million: $375 million civil penalty plus $567 million abatement fund
Structure	$300 million within 14 days of signature; $100 million second instalment	Penalty plus a fund allocated across five abatement categories
Conditions	Second instalment contingent on a court order vacating the 2019 Musical.ly order; no admission of liability	Abatement Period tolled during appeal only if Meta pays a supersedeas bond
Duration	Ends the 2024 action and the 2019 order	Five-year Abatement Period from entry of the order
Ongoing duties	None new in the agreement	Semiannual compliance reports; age assurance; Teen Account defaults; protections frozen at a minimum standard

Source: Settlement Agreement and Release, United States v. ByteDance Ltd., No. 2:24-cv-06535 (C.D. Cal.), effective 19 August 2026; Findings of Fact, Conclusions of Law and Judgment, No. D-101-CV-2023-02838, filed 6 August 2026. Full links in References.

A stayed judgment still consumes capital

An appeal moves the payment date. It leaves the capital requirement in place. The New Mexico judgment states that the five-year Abatement Period runs from entry of the order and is tolled during any appeal provided Meta pays a supersedeas bond¹. A supersedeas bond is security posted so the winning party can collect if the appeal fails, and it is what lets a defendant stop enforcement while it contests the result.

Meta has said it will appeal, and in late August it petitioned the court to accept a $1.8 billion bond⁷ to stop collection while the appeal is pending, and filed motions asking the judge to amend most of his findings and to cut the abatement fund from $567 million to about $60 million. The same report records that the judge had already stated the injunctive relief could not be paused during an appeal, and that as of 9 September he had yet to rule on Meta’s new filings.

Set the bond against the judgment. To secure a $942 million judgment, Meta offered a bond of almost twice that amount. A surety writing that bond prices the group’s credit and can ask for collateral, so the bond draws on the same balance-sheet capacity as a revolving credit facility, for as long as the appeal lasts. An appeal that runs two years keeps that capacity committed for two years, whatever the final award. A finance team that books the judgment as a legal reserve and leaves the bond out of the liquidity plan understates the call on capital by the larger of the two numbers.

TikTok’s agreement shows the second form of security. Of the $400 million, $300 million falls due within 14 days of signature and $100 million within 14 days after the court vacates the 2019 order⁸. The contingent tranche is a liability with a trigger date the company does not control: a treasury plan has to hold the cash from signature until the court acts.

The remedy costs more than the headline

The $567 million funds the state’s programme. Meta’s own compliance work sits outside that figure and runs for five years. The judgment orders Meta to report in writing every 30 June and 31 December¹ on its progress against each abatement measure, filed into the court record. It requires Meta to keep improving its age assurance models in New Mexico, including artificial intelligence tools and an attempt to build a dedicated under-13 prediction model within two years. Where Meta cannot estimate a user’s age precisely, it must treat the user as under 13 or under 18 until the user verifies. Teen Account defaults stay in place, including private-by-default Instagram accounts for users under 18, and the cessation of end-to-end encryption on Instagram holds for the period.

One clause turns these duties into a fixed cost base. Minimum protections may not be discontinued or diminished¹ before the end of the Abatement Period without the state’s written stipulation or a court order. The court declined a standing child-safety monitor, and kept the power to appoint a monitor or special master for any requirement that keeps coming back to it. Every product decision touching New Mexico teenagers now passes a legal test for five years, and the engineering, review staff and reporting that test demands are operating and capital costs that sit outside every headline figure.

Costing the remedy line by line shows where that money goes. Five years of semiannual filings means ten reports to the court if the period runs untolled, each one evidencing progress on every abatement measure. The judgment also requires a human review of every child-exploitation report within 48 hours¹ of its submission through a reporting tool on each platform surface, a staffed queue sized to whatever volume New Mexico users generate. The under-13 age model is a machine-learning build with its own data, testing and governance, and the order adds an appeal route for users whose age was estimated incorrectly. These items sit outside the $567 million and land on the company’s own operating budget and engineering roadmap. A finance team that wants the full cost of a remedy builds it from the order’s numbered paragraphs, the way an engineer costs a specification, and holds that figure next to the headline.

The multistate settlement carries the same shape at larger scale. The attorneys general list a two-hour combined daily limit on Instagram and Facebook for minors, in force for five years and tightening to 60 minutes for ten years if comparable platforms adopt similar terms, with night-time blocks, age verification and independent audits⁶. The money is paid in instalments over a ten-year period⁹. A ten-year payment stream with product conditions attached is a capital project with a regulator on its steering committee.

The clearest price for a remedy in August came from the company that paid to end one. TikTok’s agreement adds no new conduct obligations. Its $100 million second instalment buys the vacatur of the 2019 order, which had governed the business since 2019. A board can read that tranche as the market value of an expired remedy: what a company will pay to be free of ongoing obligations. The operating side of this, how a compliance function absorbs matters arriving in clusters, is covered in the affairs analysis of 151 enforcement filings in four weeks. This piece follows the money.

Accounting already gives the trigger, and it books the floor

Both reporting frameworks tell finance when an exposure becomes a liability. Under US generally accepted accounting principles, Accounting Standards Codification (ASC) 450-20 requires a loss contingency to be accrued when the loss is probable and can be reasonably estimated¹⁰. Where the estimate is a range, the company accrues the best estimate inside it, or the lowest amount when every point in the range is equally likely, and discloses the reasonably possible excess. Under International Financial Reporting Standards, International Accounting Standard (IAS) 37 recognises a provision when an outflow of resources is probable¹¹ and can be estimated reliably, and discloses a contingent liability in the notes unless the outflow is remote.

The low-end rule is where the accounting and the capital plan part company. August produced three ranges with wide spreads: $300 million due against $400 million in total for TikTok, $12.1 billion against $17.1 billion for the multistate settlement, and Meta’s own proposed $60 million against a $567 million order. A balance sheet can legitimately carry the bottom of each range. A capital plan that copies the balance sheet funds the floor of the exposure while the bond, the contingent tranche and five or ten years of remedy work arrive at the top. The accounting standards tell finance when to record a liability. The board has to decide separately how much capacity to hold against it.

Four tests move an exposure into the capital plan

Kainjoo’s Capital Exposure Test sorts open matters with four questions. A matter that meets two or more of them goes to the capital committee and the board risk discussion, with the general counsel and chief financial officer presenting it together.

• Size. The top of the range, plus any bond, exceeds one quarter’s free cash flow for the entity that will pay.
• Span. Payments or obligations run beyond the current three-year plan, as with a five-year Abatement Period or ten-year instalments.
• Security. The matter ties up capacity before any payment, through a supersedeas bond, escrow, a letter of credit or a contingent tranche held in cash.
• Scope. The remedy forces a change to the product or its infrastructure, such as age assurance systems, default settings or design limits, that needs engineering budget.

Exhibit 2. The Capital Exposure Test applied to the two August matters

Test	TikTok and ByteDance	Meta (New Mexico)
Size	$400 million, $300 million of it due in 14 days; met where that tops a quarter’s free cash flow	$942 million plus a $1.8 billion bond; met where the total tops a quarter’s free cash flow
Span	Met until vacatur, then closes	Met: five years, longer if tolled
Security	Met: $100 million contingent tranche	Met: $1.8 billion bond requested
Scope	Releases scope: ends the 2019 order	Met: age assurance and Teen Account duties

Source: Kainjoo Capital Exposure Test, applied to the settlement agreement, the New Mexico judgment and press reporting of Meta’s bond request. Full links in References.

The Size test is deliberately relative. The same $400 million is a rounding item for one group and a covenant event for another, so the threshold is set against the cash flow of the entity that will actually pay. The other three tests turn on structure, and structure is what August changed: the New Mexico matter meets Span, Security and Scope before anyone decides whether $942 million is large. Applied this way, the test turns a legal register into a capital register: each matter that clears two tests carries a ceiling, a security requirement and a remedy budget, and the capital committee sees all three on one line, with the year in which each one peaks.

Four Monday actions move open matters into the capital plan

1. The general counsel and the chief financial officer rank the five largest open regulatory matters on the four tests, using the top of each range, and send every matter that meets two tests to the capital committee.
2. Treasury models the full-bond cost of each of the five: the bond amount, the likely collateral demand and the effect on credit facility headroom for an appeal lasting two years.
3. The finance team adds one remedy scenario to next year’s budget, with five years of compliance reporting, an age assurance or design change and its engineering cost, held next to capital expenditure.
4. The board writes a regulatory-penalty tolerance into its risk-appetite statement: the maximum combined exposure, including bonds and contingent tranches, it accepts before a matter goes to the full board.

Kainjoo works with finance and legal teams to put open regulatory matters through this test and into the capital plan. Talk to Kainjoo about a regulatory capital exposure review.

This article has been reviewed by Haider Alleg, Managing Partner at Kainjoo SA.

References

1. First Judicial District Court, State of New Mexico. State of New Mexico ex rel. Torrez v. Meta Platforms, Inc., No. D-101-CV-2023-02838, Findings of Fact, Conclusions of Law, and Judgment, Order, and Decree of the Court, filed 6 August 2026. https://nmcourts.gov/wp-content/uploads/2026/08/D-101-CV-2023-02838-Final-FOFCOL-and-Judgment-of-the-Court.pdf
2. New Mexico Department of Justice. New Mexico Department of Justice Wins Landmark Verdict Against Meta, March 2026. https://nmdoj.gov/press-release/new-mexico-department-of-justice-wins-landmark-verdict-against-meta/
3. New Mexico Department of Justice. Court Orders Meta to Pay $942 Million and Overhaul Protections for Children on Facebook and Instagram in Landmark New Mexico Ruling, August 2026. https://nmdoj.gov/press-release/court-orders-meta-to-pay-942-million-and-overhaul-protections-for-children-on-facebook-and-instagram-in-landmark-new-mexico-ruling/
4. US Department of Justice, Office of Public Affairs. Justice Department Secures $400M Settlement with TikTok and ByteDance to Resolve Children’s Privacy Claims, 21 August 2026. https://www.justice.gov/opa/pr/justice-department-secures-400m-settlement-tiktok-and-bytedance-resolve-childrens-privacy
5. US Federal Trade Commission. FTC Investigation Leads to Lawsuit Against TikTok and ByteDance for Flagrantly Violating Children’s Privacy Law, 2 August 2024. https://www.ftc.gov/news-events/news/press-releases/2024/08/ftc-investigation-leads-lawsuit-against-tiktok-bytedance-flagrantly-violating-childrens-privacy-law
6. New Jersey Office of the Attorney General. Attorney General Davenport Announces Historic $17 Billion Settlement With Meta, 26 August 2026. https://www.njoag.gov/attorney-general-davenport-announces-historic-17-billion-settlement-with-meta/
7. Santa Fe New Mexican. With $1 billion on the line following New Mexico trial, Meta wants a do-over, 9 September 2026. https://www.santafenewmexican.com/news/local_news/with-1-billion-on-the-line-following-new-mexico-trial-meta-wants-a-do-over/article_f0e8c961-76c2-48a6-97c6-564fe8f6dd0f.html
8. US District Court, Central District of California. United States v. ByteDance Ltd. et al., No. 2:24-cv-06535, Settlement Agreement and Release, effective 19 August 2026. https://justice.gov/sites/default/files/2026-10/settlement_scan.pdf
9. ESG Dive. Meta settles landmark child privacy case for up to $18B, 26 August 2026. https://www.esgdive.com/news/meta-settles-landmark-child-privacy-case-for-up-to-18b/828850/
10. Deloitte. Roadmap: Contingencies, Loss Recoveries and Guarantees, section 2.3, Recognition (ASC 450-20). https://dart.deloitte.com/USDART/home/codification/liabilities/asc450-10/deloitte-s-roadmap-contingencies-loss-recoveries/chapter-2-loss-contingencies-commitments/2-3-recognition
11. IFRS Foundation. IAS 37 Provisions, Contingent Liabilities and Contingent Assets. https://www.ifrs.org/issued-standards/list-of-standards/ias-37-provisions-contingent-liabilities-and-contingent-assets/