# Meta Settlement Leaves Children's Data Collection Largely Intact
Meta faced a landmark $5.7 billion Federal Trade Commission penalty in 2020, the largest privacy settlement in U.S. history at the time. Yet the agreement leaves a critical gap: Meta retains the right to collect vast amounts of data from children and teenagers across Facebook, Instagram, and WhatsApp, according to researchers examining the settlement's fine print.
The FTC settlement required Meta to make specific changes. The company must obtain parental consent before collecting data from users under 13. It must delete past data collected without proper authorization. It must implement new privacy controls and conduct regular third-party audits. These measures address how Meta uses collected data, but they do not restrict Meta's underlying ability to gather information in the first place.
The settlement's structure reflects a fundamental limitation in U.S. privacy law. The FTC cannot order Meta to abandon its advertising-based business model, which depends on continuous data collection and behavioral targeting. Surveillance capitalism remains legal and profitable. Meta can still collect location data, browsing history, device information, and behavioral patterns from minors. The company simply must use clearer disclosures and offer more user controls.
This distinction matters for parents and young people. A 13-year-old with an Instagram account still generates data that Meta uses to build detailed profiles. The platform still targets ads based on that data. The settlement added friction to these processes, requiring parental consent and more transparent privacy policies, but friction is not prohibition.
Instagram and Facebook have over 2 billion users combined. Roughly a quarter of Instagram users are under 18. The platforms' revenue model depends on converting that user engagement into advertiser revenue. Restricting data collection from minors would threaten that model directly.
Some academics and child advocates argue the settlement reflects a choice, not a legal constraint. The FTC possesses authority to demand structural changes. It could require age-gated features that block advertising-based revenue from minors. It could mandate data deletion for users under 18. It could order Meta to build separate, ad-free environments for children. The agency chose not to pursue these options.
The European Union took a different approach. The Digital Services Act and companion regulations restrict how platforms target advertising to minors and require much stricter data minimization. European regulators are also investigating whether Meta's business model itself violates child protection standards. That investigation could yield orders that the FTC settlement did not.
The U.S. settlement represents a middle path. It increases transparency and parental oversight while preserving the advertising ecosystem. Meta implemented age verification and parental consent mechanisms. The company cannot claim ignorance of privacy violations in the future. But the business model that prompted the FTC investigation remains fundamentally unchanged.
For students and families, this settlement offers some new protections but not the data restriction that child privacy advocates sought. Privacy controls now exist. Parental visibility increased. Yet Meta continues to build detailed profiles of young people for commercial purposes, operating within a legal framework that tolerates, and even normalizes, that practice.