Bay Street Wire
Tech & BusinessOpinion

The $18 Billion Data Wash: Meta’s Settlement is a Blueprint for Surveillance AI

Portrait of Naomi Frost
Naomi Frostcybersecurity & privacyAug 28AI
The $18 Billion Data Wash: Meta’s Settlement is a Blueprint for Surveillance AI

AI-generated image · Bay Street Wire

Under the guise of child safety, Meta has secured a legal shield to use children's data for age-detection models, proving that privacy is just a bargaining chip.

Meta is paying up to $18 billion to settle claims from nearly every U.S. state and territory regarding youth online harms, but the real victory for the company isn't the payout—it's the permission to keep harvesting children's data.

**OPINION:** This isn't a victory for child safety; it is a data-laundering operation. By framing the retention of children's data as a tool for 'age assurance,' Meta is effectively securing a legal pass to train the next generation of surveillance AI under the guise of protection. When privacy becomes a line item in a settlement, it ceases to be a right and becomes a corporate asset.

According to reporting from TechCrunch, a critical provision in the settlement with attorneys general from 29 states grants Meta a shield against lawsuits under existing child safety laws regarding the retention and use of children's data. This permission is specifically for training and testing a model to detect users under the age of 13, which Meta must implement within a year.

While the Children’s Online Privacy Protection Act (COPPA) typically restricts the collection of personal information from children, the settlement states that the attorneys general have agreed "fully, finally, and forever" not to bring past, present, or future COPPA claims—or similar state-law claims—related to this use of data. TechCrunch notes that while Meta is barred from using this data for marketing, ad targeting, or algorithmic optimization, the agreement is vague on exactly what behavioral information will be retained or for how long.

Legal experts cited by TechCrunch express concern over the enforceability of these boundaries. Philip N. Yannella of Blank Rome notes that isolating specific data from broader systems is technically difficult. Furthermore, Peter Jackson of Greenberg Glusker LLP suggests this carve-out could "disincentivize future enforcement actions," describing the measures as hallmarks of a "hasty" negotiation. Joshua Wurtzel of Schlam Stone & Dolan LLP adds that while the release doesn't apply if Meta exceeds these lines, future legal disputes would be complicated by the need to prove Meta violated the settlement's specific terms.

Beyond the data harvesting, CBC News reports that the settlement—described as the largest state consumer protection settlement in history outside of the 1990s Big Tobacco cases—includes several platform design changes for users under 18:

* **Usage Limits:** A default daily time limit of two hours, with prompts after 15, 60, and 90 minutes of continuous use. * **Blackout Periods:** Blocks on most usage from midnight to 6 a.m. and muted notifications during school hours (8 a.m. to 3 p.m.). * **Feed Control:** The option to choose a non-algorithmic feed by default and the ability to disable autoplaying content. * **Comparison Limits:** Blocking "extreme makeup" filters and hiding reaction/like counts.

Meta has indicated it may further reduce the daily time limit to one hour if competitors like TikTok, YouTube, and Snapchat adopt similar measures. While CBC News reports that these changes may eventually go global, the legal shield for data retention remains a central, troubling pillar of the deal. As TechCrunch reports, an independent auditor will monitor compliance, but the risk remains that these behavioral insights could eventually bleed into other Meta systems.

Sources

More from Naomi Frost