Meta has reached an $18 billion settlement with 29 U.S. states over a lawsuit concerning children's safety on Instagram and Facebook. The deal, announced Wednesday, is historic in scale, with Meta agreeing to sweeping changes in how minors use its platforms. But as with many things in tech, the headline number is more impressive than the actual impact.
Jessica Nall, a technology litigator at Withers, told TechCrunch that the settlement "gives the AGs what they want, which is the political story that they've extracted a huge amount of benefit for the public." But she noted the real-dollar impact is softer than it appears, especially since the payment is spread over 10 years. "We're talking about one of these tech companies where their annual revenue is larger than the GDP of most European countries." Indeed, Meta reported more than $200 billion in total revenue in 2025, making that $18 billion look like pocket change.
The bigger story isn't the money - it's what Meta now has to build: the most detailed child-safety rules any major platform has agreed to, all resting on age-verification technology that still doesn't work particularly well. Meta hasn't admitted wrongdoing, even as it settles allegations that it intentionally designed its platforms to keep children hooked - a common tactic to avoid a jury trial where the risk of a worse outcome is higher. A ruling against Meta could also have jeopardized the legal protections (like Section 230) that allow social platforms to escape liability for user posts.
"I think it's wise of them to try to get out of it, especially without a legal finding against them on any of the First Amendment issues and the Section 230 issues," Nall said. "That could be existential, potentially, not just for Meta but for every tech company that has a product that engages with users, which is almost all of them."
The settlement also reignites concerns over age verification measures intended to protect children but which can create new privacy risks for everyone. "This is a classic debate around prioritizing safety over privacy," Dr. Alexis Ingber, a professor of communications at Syracuse University, told TechCrunch. "If we want to keep children safe, here are all the design things we're gonna have to do, but we're gonna have to also do this age verification thing that's gonna take away from people's data privacy."
Under the settlement, Meta has proposed a list of design changes, including a default two-hour daily screen-time limit for app use, prompts every 15 minutes to "encourage intentional use," overnight blocking (midnight to 6 a.m.) for accounts identified as minors, muted notifications during school hours (8 a.m. to 3 p.m.), and hiding 'like' counts for teens by default. Sounds great on paper, but as Ingber notes, "they are all reliant upon successful, effective, and unbiased age verification technology... I'm very curious to see how Meta is going to move forward with trying to do that, given that by and large, these technologies have failed."
Age-verification tech has evolved beyond clicking "Yes, I am 21." Companies now use biometric scans (like selfies), government ID checks, or behavioral analysis - each with its own flaws. Behavioral analysis can misjudge adults as minors or vice versa, while ID and biometric checks require handing sensitive documents to a third party just to use an app. Some users don't trust platforms to roll this out responsibly; Discord learned this when it delayed its global age verification after user backlash.
Not everyone shares the pessimism. "I think the technology has evolved quite a bit in the last few years," Philip Yannella, co-chair of the privacy and data security group at Blank Rome, told TechCrunch. "There are ways you can verify someone's age, create a token that would signal that this particular IP is associated with someone below the age of 13, whatever it is, but discard the personal information." Still, even transmitting sensitive identity info online carries privacy risks - a breach of ID scans or facial biometric data tied to minors creates identity theft risks, and unlike a password, a leaked face can't be changed.
Meanwhile, as Meta and the 52 state attorneys general finalize these guidelines (which Meta must follow for the next 10 years), the company is spinning the settlement not as a concession but as proof of leadership in children's online safety. Meta is now running full-page newspaper ads calling on TikTok and YouTube to adopt similar design changes, without mentioning that its own adoption came as part of a legal settlement. Roughly 30% of Meta's settlement payment depends on whether TikTok and YouTube also comply.
While Ingber worries about the reliance on potentially insecure verification mechanisms, she sees a silver lining: "Meta has extraordinary power to create norms through its platform design. If you change the way that the platform is designed, you can set new norms. You can make things better." Or, you know, just pay $18 billion and hope nobody notices the fine print.