Court Rules
All enforcement actions
SettlementCritical Risk

FTC Fines Epic Games $275M for COPPA Violations and Dark Patterns

Epic Games, Inc.December 19, 2022Federal Trade Commission

Penalty Amount

$275,000,000

Summary

Epic Games, maker of Fortnite, violated children's privacy laws by collecting data from under-13 users without parental consent and used deceptive designs to trick users into unintended purchases. The FTC secured a $275 million civil penalty and $245 million in consumer refunds, with requirements to enhance privacy defaults, delete improperly collected data, implement a privacy program, and prohibit dark patterns and account locking for charge disputes.

Remedy

Epic must pay a $275 million penalty to the U.S. Treasury, provide $245 million in refunds to consumers, delete personal information collected from children without parental consent, implement a comprehensive privacy program with independent audits, change default privacy settings to turn off voice and text communications for children and teens unless affirmatively consented, and is prohibited from using dark patterns to induce purchases or blocking account access for disputed charges.

Monetary PenaltyConsumer RefundsInjunctionConsent DecreeCompliance ProgramAudit RequirementData Deletion

Contract Impact

In-house legal teams should review all customer-facing agreements, particularly Terms of Service (ToS), End User License Agreements (EULA), and in-app purchase/billing terms for users of any online service or game. Key clauses to scrutinize include: (1) consent mechanisms for data collection, especially for users identified or likely to be under 13, ensuring they mandate verifiable parental consent; (2) billing and purchase clauses to identify and eliminate 'dark patterns'—deceptive UI/UX designs that trick users into unintended charges; (3) account management terms that prohibit locking or restricting accounts for disputing charges; (4) data handling and retention clauses to ensure improper children's data is deleted and collection is limited; and (5) privacy setting clauses to enforce strong defaults for minors (e.g., disabling voice/text chat). Changes will likely involve rewriting consent flows, redesigning purchase interfaces for clarity, implementing robust refund processes, and establishing enforceable privacy-by-default configurations for younger users.

Contract Search Terms

parental consent mechanismverifiable parental consentdark pattern prohibitiondata deletion protocolprivacy default settingsrefund policyaccount locking prohibitionchildren's data collectionbilling transparencyage verification

Laws Cited

Violation Types

Entity Details

Entity

Epic Games, Inc.

Also known as: Epic Games

Industry

Gaming

Official Sources

Source Evidence

Entity Name
"Epic Games, Inc., creator of the popular video game Fortnite"
Fine Amount
"Epic will pay a $275 million penalty"
Laws Cited
"violated the Children’s Online Privacy Protection Act (COPPA)"
Laws Cited
"FTC Act’s prohibition against unfair practices"
Laws Cited
"violated the COPPA Rule"
Violation Types
"collecting personal information from children under 13 who played Fortnite, a child-directed online service, without notifying their parents or obtaining their parents’ verifiable consent."

Related Enforcement Actions

FTC

Vanilla Chip LLC

$750K

The FTC finalized an order against Vanilla Chip LLC (doing business as TruHeight) and its principals for deceptively advertising height-enhancing supplements for children and teens without scientific evidence. The company also used fake reviews and incentivized 5-star ratings. The order requires a $750,000 payment and prohibits false health claims and deceptive review practices.

FTC

RentGrow Inc.

$2.3M

The FTC alleged that RentGrow, a tenant screening company, violated the Fair Credit Reporting Act (FCRA) by failing to use reasonable procedures to ensure the accuracy of its reports, including by reporting duplicate records and failing to disclose data sources. RentGrow agreed to pay a $2.25 million penalty and is prohibited from further FCRA violations and from misrepresenting dispute outcomes.

FTC

Handy Technologies

The FTC and New York Attorney General took action against Handy Technologies for deceptive earnings claims and failure to disclose fees and fines that led to millions of dollars being withheld from workers' wages. The FTC is sending over $2.7 million in refunds to 62,893 affected consumers.

FTC

Hopper Inc.

$35.0M

The FTC alleged that Hopper, a travel booking app, charged consumers hidden and pre-selected fees (Tip and VIP Support) without their consent, misrepresented the benefits of VIP Support and Price Freeze services, and failed to clearly disclose total prices. Hopper agreed to pay $35 million for consumer redress and is prohibited from misrepresenting fees under a proposed order.

FTC

Publishing.com LLC

$1.5M

The FTC finalized a settlement with Publishing.com LLC and its principals for misleading consumers about potential earnings from self-publishing products. The company will pay $1.5 million and is prohibited from making unsubstantiated earnings claims, failing to disclose refund terms, and misrepresenting endorsements and reviews.

FTC

Federal Trade Commission

The FTC is seeking public comment on a proposed policy statement addressing concerns that AI companies may be manipulating AI system outputs contrary to consumer expectations for objectivity and accuracy. The statement explains that such conduct could be considered deceptive under Section 5 of the FTC Act. The public comment period runs until July 31, 2026.