TikTok Pays $400 Million Over Children's Privacy (08/22/2026)

The pattern that keeps repeating in wearables is that the recording capability arrives inside an object people have already decided is harmless. Glasses did it first and the workplace is still arguing about them. Reports today say the next AirPods will carry cameras, which puts the same question inside a thing your colleagues wear through a meeting without anyone registering it as a device at all.

Top 5 Critical Privacy Alerts

1. TikTok and ByteDance Settle for $400 Million

The Justice Department and Federal Trade Commission filed in August 2024 alleging that TikTok knowingly allowed children under 13 to create accounts, collected data from children using Kids Mode, and failed to comply with parents’ requests to delete their children’s accounts. The settlement announced today runs $400 million, structured as $300 million immediately and $100 million on vacating a prior consent decree, and requires stronger age controls and parental oversight. The company paid a €345 million fine in the European Union in September 2023 over related conduct. The Hacker News

Operator Note: Two years from complaint to settlement, and a second nine-figure penalty on the same underlying practice in a different jurisdiction. The part worth keeping is the deletion failure, because that is the obligation most organizations underestimate. Honouring a deletion request means finding every copy, including the analytics extract and the backup, and most companies discover at that moment that they cannot enumerate their own copies.

2. The Next AirPods Are Reported to Carry Cameras

Reporting indicates Apple’s next generation of AirPods will include cameras. An earbud is an object that people have entirely stopped noticing on other people, which is the property that makes this different from a phone or even from glasses. PogoWasRight

Operator Note: Your visitor and meeting policies name phones and cameras, and some of them now name glasses because we all spent last week on that. None of them name earbuds, and the policy will be a year behind the hardware unless somebody writes the category rather than the product. We covered how to write that category in why your visitor policy does not cover face recognition glasses.

3. Nobody Can Tell Whether the Glasses Opposite Them Are Recording

The practical question of whether a person wearing smart glasses is filming you has no reliable answer available to the person being filmed. The indicator exists and it is small, easy to obscure, and unfamiliar to most people. PogoWasRight

Operator Note: Consent requires knowing. A recording indicator that the subject cannot reliably see is a disclosure aimed at regulators rather than at people, and it will hold up in a compliance review while doing nothing in a hallway. This is the same week ICE told its own agents to stop wearing these on duty, which is the clearest available signal about what the people deploying them think.

4. A Citizen Faces Prosecution for Deleting His Own Phone Data

A US citizen who deleted data from his own phone is being prosecuted, and argues the case puts privacy at risk for everyone. Deleting your own data becomes a hazardous act once somebody decides retroactively that you should have kept it. PogoWasRight

Operator Note: Every privacy practice in the world tells people to hold less data and delete what they no longer need, and this case runs directly against that advice for individuals. If it stands, the practical guidance to a traveller changes from delete what you do not need to preserve everything and hope, which is a worse posture for the person and a better one for whoever wants to read the phone.

5. Face Biometrics Keep Expanding in Both Directions

A survey of where face biometrics are going covers the useful applications and the corrosive ones together, which is the honest way to look at a technology that is doing both at once. Biometric Update

Additional Privacy Alerts

Privacy Laws & Regulations

• Connecticut’s omnibus AI law shows where state regulation is heading: The issues it raises are the ones other legislatures are drafting toward. Sidley Data Matters
• A California court dismissed claims from a self-proclaimed online privacy tester: Useful reading on where the tracking-litigation line is currently drawn. PogoWasRight

Data Minimization & User Consent

• NIST selected 11 contactless fingerprint providers for certification testing: Biometric Update
• Sri Lanka is advancing a biometric passport rollout through a new immigration bill: Biometric Update

The Axe Report is a daily briefing from Grab The Axe. Need help assessing your organization’s security posture? Take our free Human Attack Surface Score assessment.