New: a trial court in 1 of every 10 U.S. counties. Read the post
Court Rules
All enforcement actions
SettlementCritical Risk

FTC Fines Epic Games $275M for COPPA Violations and Dark Patterns

Epic Games, Inc.December 19, 2022Federal Trade Commission

Penalty Amount

$275,000,000

Summary

Epic Games, maker of Fortnite, violated children's privacy laws by collecting data from under-13 users without parental consent and used deceptive designs to trick users into unintended purchases. The FTC secured a $275 million civil penalty and $245 million in consumer refunds, with requirements to enhance privacy defaults, delete improperly collected data, implement a privacy program, and prohibit dark patterns and account locking for charge disputes.

Remedy

Epic must pay a $275 million penalty to the U.S. Treasury, provide $245 million in refunds to consumers, delete personal information collected from children without parental consent, implement a comprehensive privacy program with independent audits, change default privacy settings to turn off voice and text communications for children and teens unless affirmatively consented, and is prohibited from using dark patterns to induce purchases or blocking account access for disputed charges.

Monetary PenaltyConsumer RefundsInjunctionConsent DecreeCompliance ProgramAudit RequirementData Deletion

Contract Impact

In-house legal teams should review all customer-facing agreements, particularly Terms of Service (ToS), End User License Agreements (EULA), and in-app purchase/billing terms for users of any online service or game. Key clauses to scrutinize include: (1) consent mechanisms for data collection, especially for users identified or likely to be under 13, ensuring they mandate verifiable parental consent; (2) billing and purchase clauses to identify and eliminate 'dark patterns'—deceptive UI/UX designs that trick users into unintended charges; (3) account management terms that prohibit locking or restricting accounts for disputing charges; (4) data handling and retention clauses to ensure improper children's data is deleted and collection is limited; and (5) privacy setting clauses to enforce strong defaults for minors (e.g., disabling voice/text chat). Changes will likely involve rewriting consent flows, redesigning purchase interfaces for clarity, implementing robust refund processes, and establishing enforceable privacy-by-default configurations for younger users.

Contract Search Terms

parental consent mechanismverifiable parental consentdark pattern prohibitiondata deletion protocolprivacy default settingsrefund policyaccount locking prohibitionchildren's data collectionbilling transparencyage verification

Laws Cited

Violation Types

Entity Details

Entity

Epic Games, Inc.

Also known as: Epic Games

Industry

Gaming

Official Sources

Source Evidence

Entity Name
"Epic Games, Inc., creator of the popular video game Fortnite"
Fine Amount
"Epic will pay a $275 million penalty"
Laws Cited
"violated the Children’s Online Privacy Protection Act (COPPA)"
Laws Cited
"FTC Act’s prohibition against unfair practices"
Laws Cited
"violated the COPPA Rule"
Violation Types
"collecting personal information from children under 13 who played Fortnite, a child-directed online service, without notifying their parents or obtaining their parents’ verifiable consent."

Related Enforcement Actions

FTC

REPS & Company Inc.

The FTC referred a complaint against REPS & Company Inc. and company executives, alleging they bypassed ticket-issuer security controls and purchasing limits to acquire millions of tickets for resale. The complaint was filed by the Department of Justice, and the case will be decided by the court; the press release does not report a penalty or other remedy imposed.

FTC

Digital Forensics Corporation LLC

The FTC sued Digital Forensics Corporation LLC and affiliated defendants, alleging they misled sextortion victims with promises of investigative and monitoring services that often were not provided, and used fake positive reviews. A federal court granted the FTC’s request to temporarily halt the defendants’ activities; the complaint remains for the court to decide.

FTC

Greenway Auto Group

The FTC alleged that Greenway Auto Group advertised vehicle prices thousands of dollars below the amounts consumers actually paid and used mailers falsely suggesting recipients had won cash prizes. Greenway agreed to an order requiring transparent pricing and prohibiting deceptive prize mailers and other misrepresentations; the press release does not state a monetary penalty.

FTC

24 healthcare services companies (not individually named)

The FTC sent warning letters to 24 large healthcare services companies, cautioning that incomplete, inaccurate, or untimely pricing information for scheduled medical care may be unfair or deceptive. The letters urge recipients to review their price-disclosure practices and take corrective action; they announce no fine or formal order.

FTC

Premier Franchising Group LLC and Franchise Fastlane LLC

$1.9M

The FTC alleged that Premier Franchising Group LLC and Franchise Fastlane LLC made deceptive and unsubstantiated claims about the Premier Martial Arts franchise opportunity and violated the Franchise Rule. The proposed settlements require the companies to pay a combined $1.85 million to compensate franchisees, prohibit certain misrepresentations, and require Franchise Rule compliance; certain franchisees may also cancel their agreements without penalty.

FTC

Lens.com Inc.

The FTC, Utah, and Nevada sued Lens.com Inc., alleging that it advertised artificially low contact lens prices while hiding mandatory checkout charges and misleading consumers about its AutoRefill subscription. The complaint seeks to stop the alleged practices; the court has not yet decided the case, and no penalty or remedy has been imposed.