Insurance
Home›Insurance›Industry & Deals›TikTok cyber settlement spotlights limits in cyber and…
TikTok cyber settlement spotlights limits in cyber and D&O coverage
Regulators issued about $542 million in global privacy fines in Q1 2026, while cyber and D&O policies often treat fines and penalties separately from defense costs.
TikTok and its parent, ByteDance, agreed to pay $400 million to settle a Department of Justice lawsuit alleging violations of COPPA tied to data collected from millions of users under age 13, one of the largest settlements in the law's history, according to Insurance Business.
The settlement arrives as privacy enforcement accelerates and is reshaping how corporate policyholders evaluate cyber and management liability programs. Global regulators issued about $542 million in fines during the first quarter of 2026 alone, with data privacy failures among the largest categories by fine volume, the outlet said.
Insurance Business notes that cyber and D&O coverage is typically split between defense costs for investigations or enforcement actions, which are often broadly available, and the fine or penalty at the end of the process, which is more often excluded or capped under a sub-limit that can be far below the headline policy limit.
As large settlement figures grow, Insurance Business said brokers and risk managers are increasingly scrutinizing policy sub-limits, and other mechanics such as retention levels, because the gap between headline limits and what would actually apply to fines of this scale can become a critical blind spot before a claim arises.