A consent decree is a court order whose terms the parties negotiated before a judge signed it. It ends a lawsuit, most often one brought by a government agency, without a trial and usually without any admission of wrongdoing, yet it binds the defendant as firmly as a judgment won in court. Each side gets something a trial cannot promise. The government secures enforceable obligations quickly and without the risk of losing; the defendant avoids findings of fact, years of litigation and, in most cases, any formal finding of liability.

Much of what governs targeting, location data, agency buying and children's audiences in the United States arrives this way rather than through statute, and obligations written for one company can run for two decades.

How a decree is built

Negotiation usually comes first and the lawsuit second. When the United States sued Musical.ly, the app that became TikTok, on February 27, 2019, a 17-page proposed stipulated order arrived with the complaint. Judge George H. Wu later noted that "the parties had agreed upon a disposition of the lawsuit (subject to the Court's approval) before the action was even filed." The order was entered on March 27, 2019.

Its anatomy is typical. A prohibitory injunction barred future breaches of the Children's Online Privacy Protection Act (COPPA). Affirmative duties required deletion of data from under-13 accounts, and a $5.7 million civil penalty supplied the money. Reporting and monitoring clauses demanded ten years of compliance records and let the government require sworn reports, take discovery and interview staff. The order bound "successors and assigns", and the court kept jurisdiction to enforce it. Merger settlements add structural terms: a hold separate provision, a sale deadline, a divestiture trustee and a bar on reacquisition.

Consent turns coercive at enforcement. Breaching a court decree is contempt and can prompt a new case: the government's August 2024 complaint against TikTok alleged breaches of the 2019 order's recordkeeping duties. Breaching a final Federal Trade Commission (FTC) order carries civil penalties of up to $53,088 per violation. That ceiling is unchanged for 2026 because the autumn 2025 government shutdown interrupted the inflation data used to adjust it, according to Office of Management and Budget guidance of April 17, 2026.

Review before entry

Antitrust settlements by the Department of Justice (DOJ) fall under the Antitrust Procedures and Penalties Act, known as the Tunney Act after its sponsor, Senator John V. Tunney. Enacted on December 21, 1974, it requires the government to publish a proposed consent judgment in the Federal Register at least 60 days before it takes effect, explain it in a competitive impact statement and answer public comments. Defendants must disclose their contacts with officials about the proposal. A judge then asks whether the settlement falls "within the reaches of the public interest", a deferential test, according to case law the DOJ cites in its filings.

The FTC runs its own administrative track. Under Rule 2.34, the Commission accepts a consent agreement subject to final approval, publishes it for 30 days of comment and then finalises, modifies or withdraws it. The window was 60 days until 1999, when the Commission said the longer period "unduly delays implementation of consent orders". The Cox Media Group orders followed that rhythm: proposed on May 21, 2026, finalised on a 2-0 vote on August 26, 2026, and binding for 20 years. FTC cases filed in court end instead in stipulated orders signed by a judge, such as the Kochava location data order of May 2026, which runs ten years.

From Otis Elevator to sunset clauses

The Antitrust Division entered its first consent decree in United States v. Otis Elevator Company in 1906, according to a history by Douglas Ginsburg and Joshua Wright. By the 1950s, 87% of its civil antitrust cases ended that way. By the 1980s, 97% did.

Courts built the doctrine in stages. United States v. Swift & Co. in 1932 demanded "a clear showing of grievous wrong evoked by new and unforeseen conditions" before a decree could be changed. In United States v. Armour & Co. in 1971, Justice Thurgood Marshall wrote that "the scope of a consent decree must be discerned within its four corners", because a decree records a compromise rather than either side's purposes. Rufo v. Inmates of Suffolk County Jail, decided on January 15, 1992, relaxed modification of institutional reform decrees, requiring a significant change in fact or law and a suitably tailored remedy.

Early decrees had no end date. In 1979 the Antitrust Division began writing in sunset clauses, usually ten years, and in April 2018 it moved to terminate nearly 1,300 legacy judgments that it said no longer protected competition.

Privacy enforcement turned FTC orders into long compliance regimes. An October 2011 order over Google Buzz required 20 years of privacy audits; in August 2012 Google agreed to a $22.5 million penalty for breaching it by placing advertising cookies on Safari browsers. Facebook paid $5 billion for violating its own 2012 order, in a stipulated order approved on April 23, 2020.

Why advertising runs on decrees

A decree binds only its signatories, but in concentrated markets one order can reset practice for a large share of spend. The FTC's order clearing Omnicom's acquisition of the Interpublic Group (IPG), approved on September 26, 2025, bars the group for ten years from steering money away from publishers on political or ideological grounds except at an individual client's direction. On April 15, 2026, the FTC and eight states sued WPP, Publicis and Dentsu over brand safety coordination and filed a proposed consent order with the complaint.

Children's audiences are increasingly governed by negotiated orders. The Meta consent judgment of August 26, 2026 sets a default two-hour daily limit for teen accounts across Instagram and Facebook in 51 jurisdictions and ties $5.02 billion of contingent payments to whether Snap, TikTok and YouTube accept equivalent terms. Meta denies liability, and the agreement creates no precedent outside the settling states. For buyers and publishers, longevity is the point: orders outlast products, follow a business through a sale and turn public claims about audiences into sworn reports.

Limits and disputes

The missing admission is the oldest objection. Dissenting from the 4-1 vote on Google's Safari settlement, FTC Commissioner J. Thomas Rosch argued that a decree containing a denial of liability could not serve the public interest and called the penalty "de minimis" against Google's revenue, according to the International Association of Privacy Professionals.

Critics also say agencies regulate by settlement. Ginsburg and Wright described a "culture of consent" that yields conditions an agency could not win at trial. The FTC majority made the same point in its own favour in 2019, calling the Facebook relief "substantially greater" than what it "realistically might have obtained" in court, according to the Congressional Research Service.

Review is usually light. On August 12, 2026, Judge P. Casey Pitts entered the DOJ settlement letting Hewlett Packard Enterprise buy Juniper Networks, despite intervention by 12 states and the District of Columbia and two breaches of Tunney Act disclosure rules that he identified. The deal "may lessen competition", he wrote, but the court "lacks the independent power to prevent that outcome", according to reports of the ruling.

Who may rewrite a decree is unsettled. The FTC proposed in May 2023 to amend Meta's 2020 order to bar monetising minors' data. Judge Timothy Kelly said in November 2023 that he lacked jurisdiction; the D.C. Circuit reversed on May 16, 2025, and in February 2026 Meta argued that "the FTC may not modify a final judgment entered by an Article III court", according to MediaPost.

Ending one early is contested too. The DOJ's $400 million TikTok settlement made $100 million payable only if the Musical.ly order was vacated. Judge Wu's tentative ruling of September 18, 2026 proposed to refuse: "a commitment to comply is not the same as having demonstrated actual compliance." He adopted it on September 21, according to MediaPost, leaving in place duties that run until 2029.

Not the same as

Consent order. The FTC's term for an administrative order that a respondent accepts and the Commission issues without a judge. Stipulated order and consent judgment are the court-entered equivalents.

Litigated final judgment. Remedies imposed after trial. The six-year worldwide ad tech decree that Judge Leonie Brinkema ordered against Google followed liability and remedies trials, and Google never agreed to its obligations, whatever headlines call it.

Commitments decision. The European counterpart, issued by a regulator rather than a court. Germany's Bundeskartellamt accepted Apple's commitments on August 13, 2026 to redesign its tracking prompt, binding for seven years, without a fine or a finding of infringement.

Consent under privacy law. A user's permission for data processing. The two meet only when a decree regulates consent itself, as the Kochava order does.

Recent developments

Circuit Judge Monet M. Gaines signed Alabama's consent decree with TikTok at 4:29:53pm on September 25, 2026, three days before trial. It caps users aged 13 to 17 at 120 minutes a day, blocks access from midnight to 6am and limits age-estimation errors for 16 and 17 year olds to 14% in year one and 10% in year two. Alabama is guaranteed $116.2 million, with $183.8 million more tied to TikTok's deals with other states.

On September 21, twelve state attorneys general settled their challenge to the Paramount-Warner Bros. Discovery mergerwith a proposed consent decree that commits Paramount to $300 million a year of additional domestic film production for five years, according to CBS News.

Timeline

  • 1906: The Antitrust Division enters its first consent decree, in United States v. Otis Elevator Company
  • 1920: The meat packers' consent decree is entered
  • 1932: United States v. Swift & Co. sets the "grievous wrong" standard for modifying a decree
  • June 1, 1971: United States v. Armour & Co. holds that a decree's scope lies within its four corners
  • December 21, 1974: The Tunney Act is enacted
  • 1979: The Antitrust Division adopts sunset clauses, usually ten years, as general practice
  • January 15, 1992: Rufo v. Inmates of Suffolk County Jail adopts a flexible modification standard for institutional reform decrees
  • August 25, 1999: The FTC shortens its consent agreement comment period from 60 to 30 days
  • October 2011: The FTC's Google Buzz order imposes 20 years of privacy audits
  • August 9, 2012: Google agrees to a $22.5 million penalty for violating the Buzz order
  • April 25, 2018: The DOJ launches an initiative to terminate nearly 1,300 legacy antitrust judgments
  • February 27, 2019: The United States sues Musical.ly and files a proposed stipulated order the same day
  • March 27, 2019: Judge Otis D. Wright II enters the Musical.ly order with a $5.7 million penalty
  • July 24, 2019: Facebook agrees to a $5 billion penalty for violating its 2012 FTC order
  • April 23, 2020: Judge Timothy Kelly approves the Facebook stipulated order
  • May 2023: The FTC proposes modifying Meta's 2020 order to restrict use of minors' data
  • November 2023: Judge Kelly rules that he lacks jurisdiction over the modification dispute
  • August 2, 2024: The United States files a second COPPA action against ByteDance and TikTok entities
  • May 16, 2025: The D.C. Circuit reverses, holding that Judge Kelly retains jurisdiction
  • September 26, 2025: The FTC finalises the Omnicom-IPG consent order
  • April 15, 2026: The FTC and eight states sue WPP, Publicis and Dentsu and file a proposed consent order
  • April 17, 2026: The Office of Management and Budget cancels the 2026 civil penalty inflation adjustment
  • May 4, 2026: FTC attorneys sign the Kochava stipulated order
  • May 21, 2026: The FTC announces proposed consent agreements with Cox Media Group, MindSift and 1010 Digital Works
  • August 12, 2026: Judge P. Casey Pitts enters the HPE-Juniper consent decree
  • August 13, 2026: The Bundeskartellamt accepts Apple's App Tracking Transparency commitments
  • August 21, 2026: The DOJ announces a $400 million TikTok settlement and moves to vacate the Musical.ly order
  • August 26, 2026: The Meta consent judgment is entered; the FTC finalises the Cox Media Group orders
  • September 2, 2026: Judge Brinkema rejects structural remedies in the Google ad tech case
  • September 18, 2026: Judge Wu issues a tentative ruling refusing to vacate the Musical.ly order
  • September 21, 2026: Judge Wu adopts the ruling; state attorneys general settle their challenge to the Paramount-Warner Bros. Discovery merger
  • September 25, 2026: Alabama's consent decree with TikTok is signed
  • October 2, 2026: A jointly proposed final judgment is due in the Google ad tech case

Summary

Who. Government enforcers, chiefly the Department of Justice, the Federal Trade Commission and state attorneys general, and the companies they sue, including platforms, data brokers, agency holding companies and merging media groups. Federal and state judges enter and supervise the decrees; the public may comment on antitrust and FTC settlements before they become final.

What. A negotiated court order that settles a lawsuit without trial, usually without an admission of liability, and binds the defendant through injunctions, affirmative duties, payments, reporting, monitoring and a fixed term, enforceable through contempt or civil penalties.

When. The first Sherman Act decree dates from 1906. The Tunney Act added public review in 1974, sunset clauses became standard in 1979, long-running FTC privacy orders against Google in 2011 and Facebook in 2012 carried the form into data practices, and two teen safety decrees were entered in August and September 2026.

Where. Mainly in United States federal and state courts, with FTC administrative consent orders issued by the Commission itself. European regulators reach similar outcomes through commitments decisions.

Why. Settling by decree gives enforcers speed and certainty and gives defendants an exit without findings against them. For advertising, decrees now set enforceable rules on data use, agency buying and teen audiences that outlast the products and ownership structures they were written for.