Why TikTok’s security risks keep raising fears
TikTok is once again fending off claims that its Chinese parent company, ByteDance, would share user data from its popular video-sharing app with the Chinese government, or push propaganda and misinformation on its behalf.
China’s Foreign Ministry on Wednesday accused the United States itself of spreading disinformation about TikTok’s potential security risks following a report in the Wall Street Journal that the Committee on Foreign Investment in the U.S. — part of the Treasury Department — was threatening a U.S. ban on the app unless its Chinese owners divest their stake.
So are the data security risks real? And should users be worried that the TikTok app will be wiped off their phones?
Here’s what to know:
What’s the concerns?
Both the FBI and the Federal Communications Commission have warned that ByteDance could share TikTok user data — such as browsing history, location and biometric identifiers — with China’s authoritarian government.
A law implemented by China in 2017 requires companies to give the government any personal data relevant to the country’s national security. There’s no evidence that TikTok has turned over such data, but fears abound due to the vast amount of user data it, like other social media companies, collects.
Concerns around TikTok were heightened in December when ByteDance said it fired four employees who accessed data on two journalists from Buzzfeed News and The Financial Times while attempting to track down the source of a leaked report about the company.
How is the U.S. responding?
White House National Security Council spokesperson John Kirby declined to comment when asked Thursday to address the Chinese foreign ministry’s comments about TikTok, citing the review being conducted by the Committee on Foreign Investment.
Kirby also could not confirm that the administration sent TikTok a letter warning that the U.S. government may ban the application if its Chinese owners don’t sell its stake but added, “we have legitimate national security concerns with respect to data integrity that we need to observe.”
In 2020, then-President Donald Trump and his administration sought to force ByteDance to sell off its U.S. assets and ban TikTok from app stores. Courts blocked the effort, and President Joe Biden rescinded Trump’s orders but ordered an indepth study of the issue. A planned sale of TikTok’s U.S. assets was also shelved as the Biden administration negotiated a deal with TikTok that would address some of the national security concerns.
In Congress, U.S. Sens. Richard Blumenthal and Jerry Moran, a Democrat and a Republican, wrote a letter in February to Treasury Secretary Janet Yellen urging the Committee on Foreign Investment panel, which she chairs, to “swiftly conclude its investigation and impose strict structural restrictions” between TikTok’s American operations and ByteDance, including potentially separating the companies.
At the same time, lawmakers have introduced measures that would expand the Biden administration’s authority to enact a national ban on TikTok. The White House has already backed a senate proposal that has bipartisan support.
How has TikTok been restricted?
On Thursday, British authorities said they are banning TikTok on governmentissued phones on security grounds, following similar moves by the European Union’s executive branch, which temporarily banned TikTok from employee phones. Denmark and Canada have also announced efforts to block it on government-issued phones.
Last month, the White House said it would give U.S. federal agencies 30 days to delete TikTok from all government-issued mobile devices. Congress, the U.S. armed forces and more than half of U.S. states had already banned the app.
What does TikTok say?
TikTok spokesperson Maureen Shanahan said the company was already answering security concerns through “transparent, U.S.-based protection of U.S. user data and systems, with robust thirdparty monitoring, vetting, and verification.”
In June, TikTok said it would route all data from U.S. users to servers controlled by Oracle, the Silicon Valley company it chose as its U.S. tech partner in 2020 in an effort to avoid a nationwide ban. But it is storing backups of the data in its own servers in the U.S. and Singapore. The company said it expects to delete U.S. user data from its own servers, but it has not provided a timeline as to when that would occur.
TikTok CEO Shou Zi Chew is set to testify next week before the House Energy and Commerce Committee about the company’s privacy and data-security practices, as well as its relationship with the Chinese government.