ByteDance is a Chinese technology company that was founded in 2012. It is the parent company of TikTok, the popular short-form video app that has seen explosive growth in recent years. As of 2023, TikTok has around 1.5 billion monthly active users worldwide[1][2][3], making it one of the most downloaded apps in history.
TikTok launched in 2016 under the name Douyin in China, before being released internationally as TikTok the following year. The app allows users to create, share, and discover short videos that are typically set to music. Thanks to ByteDance’s acquisition of Musical.ly in 2017, TikTok was able to tap into an existing user base and grow rapidly in markets like the United States.
Today, TikTok has established itself as a major force in social media and online entertainment. However, its Chinese origins have also led to ongoing security and privacy concerns, especially from Western governments. These concerns came to the forefront once again with recent allegations that ByteDance employees improperly accessed data about some TikTok users.
Allegations of Spying
In December 2022, the Biden administration and national security agencies raised concerns about the Chinese-owned social media app TikTok. Specifically, they worried the app’s parent company, ByteDance, could access American users’ personal data and provide it to the Chinese government (1). U.S. officials have described TikTok as a national security threat, saying China could use data collected by the app for commercial or intelligence purposes (2).
There are long-standing allegations that TikTok engages in censorship at Beijing’s behest. For example, leaked audio revealed ByteDance employees discussing whether to ban accounts belonging to an American journalist who was writing critically about China (1). The White House press secretary called these revelations “deeply concerning,” highlighting broader concerns about TikTok as a potential tool for Chinese intelligence work (1).
Who Raised the Concerns
The concerns about ByteDance employees accessing TikTok user data were raised by BuzzFeed News after obtaining leaked audio recordings from more than 80 internal TikTok meetings. As reported by BuzzFeed in June 2022 [1], the leaked audio revealed that China-based ByteDance employees repeatedly accessed private data about TikTok users in the US. This led to concerns that TikTok user data could be exposed to the Chinese government. The recordings provide evidence that ByteDance employees in China had access to US TikTok user data on multiple occasions despite TikTok’s previous statements that US user data was stored separately from China.
What the Leaked Audio Reveals
In October 2022, Forbes obtained leaked audio from over 80 internal TikTok meetings, including one where a ByteDance director discussed accessing data about two Forbes reporters who were investigating TikTok (1). The director stated “they were trying to dig into the IP addresses of folks on the TikTok team” to learn their identities and locations, and that ByteDance planned to monitor the physical location of Forbes journalists (2).
This indicates ByteDance employees improperly accessed the personal data of journalists, specifically their IP addresses, without consent. The director acknowledged this was “not a very elegant solution” and raised concerns about violating journalist privacy protections.
(1) https://www.forbes.com/sites/emilybaker-white/2022/12/22/tiktok-tracks-forbes-journalists-bytedance/
(2) https://www.cnn.com/2022/12/22/tech/tiktok-bytedance-journalist-data/index.html
ByteDance’s Response
In response to the leaked audio, ByteDance has denied the allegations that they spied on TikTok users or improperly accessed data (Source). The company acknowledged that some employees inappropriately accessed data from two journalists in an effort to determine whether they were leaking internal information (Source). However, ByteDance claims this was an isolated incident done without permission, and the employees involved were fired.
ByteDance stated the “god access” mentioned in the leaked audio referred to internal tools used for debugging technical issues, and that this level of access is restricted and tracked (Source). The company asserts that user data is segregated and protected, and that the Chinese government does not have any backdoor access.
In a statement, ByteDance said they are committed to protecting user data and privacy. They emphasized that TikTok user data is stored in the US and Singapore, not China. ByteDance says they will conduct internal investigations to ensure protocols are followed.
Past Privacy Issues
TikTok has faced privacy issues and violations in the past that resulted in hefty fines. In February 2021, TikTok was fined $92 million by the U.S. Federal Trade Commission for illegally collecting personal information from children under 13 without parental consent (TikTok Privacy Policy).
In September 2022, TikTok was fined 5 million euros by the Dutch privacy watchdog for failing to offer privacy settings to children. The Dutch authority said TikTok did not provide clear information to children about how their data was being collected and used (AP News).
Most recently in September 2023, TikTok was fined an additional €405 million by European Union regulators for violating the bloc’s strict privacy rules related to child safety. The regulators found TikTok breached the EU’s General Data Protection Regulation by processing children’s data without parental consent and not being transparent enough about its data processing practices (Axios).
Broader China Tech Concerns
The allegations of spying come amid broader concerns over privacy and China’s technology companies. Many U.S. policymakers have expressed worries that Chinese apps and software threaten American data security and privacy
China has faced criticism over its cybersecurity and surveillance laws, which requires companies to cooperate with government agencies. There are worries that ByteDance could be compelled to provide data to the Chinese government given these laws.
Some experts argue that China’s approach to privacy and surveillance represents a fundamentally different set of values than in Western countries.1
TikTok, owned by ByteDance, has been a major source of tension, with some policymakers pushing for a ban over data privacy concerns. These worries persist despite TikTok storing U.S. user data in Singapore.
The broader context is one of deteriorating relations between the U.S. and China, with technology and data emerging as an area of rivalry. While details remain uncertain, the reported audio leaks will likely add to ongoing concerns.
Impact on TikTok
The spying allegations have led to significant impacts on TikTok’s policies and business operations.
In response to the backlash, TikTok announced new policies to strengthen data access protections, including restricting access to user data based on a ‘need to know’ basis for employees.
https://www.theguardian.com/technology/2022/dec/22/tiktok-bytedance-workers-fired-data-access-journalists The company also fired the employees involved in accessing user data improperly.
The revelations have fueled distrust of TikTok among users, regulators, and advertisers. Some advertisers paused spending on TikTok amid the controversies, impacting TikTok’s revenue. There are also concerns about TikTok’s ability to expand its business given the security fears.
TikTok is now attempting to rebuild trust and assure users, regulators, and partners that it takes privacy seriously. However, the spying scandal has called into question TikTok’s claims about protecting user data and cast doubt on its ability to operate securely.
Unresolved Questions
While ByteDance has acknowledged the misconduct, there are still many unanswered questions surrounding the spying allegations (NY Post). Here are some of the key issues that remain unclear:
What was the full extent and scope of the unauthorized access? How many journalists were targeted and how much of their private data was accessed? ByteDance has not provided specifics on the number of users impacted.
Who authorized this activity and how high up did it go within ByteDance? The company blamed the actions on “local employees” but has not revealed whether senior executives were involved or aware.
What user data within TikTok could have been leveraged for the spying? It’s unknown what types of user information the employees could have utilized to identify and monitor the targeted individuals.
Is this an isolated incident or part of a broader pattern? Given past privacy and censorship concerns around TikTok, some wonder if there are deeper issues with how ByteDance handles user data.
Will there be legal consequences for ByteDance and TikTok? The DOJ has opened an investigation but it’s unclear if ByteDance will face penalties over the misconduct.
How will this impact user trust in TikTok? The app will likely have to work to reassure users their data is safe, particularly journalists and public figures.
What steps will TikTok take to prevent future abuse? ByteDance has pledged internal changes but hasn’t provided specifics on new safeguards for user privacy.
Conclusion
In summary, allegations have emerged that ByteDance employees improperly accessed TikTok user data to track the locations of specific journalists. While the company denies the claims, this has fueled ongoing concerns about privacy and transparency, especially amid broader worries over Chinese tech firms and data security. It remains unclear precisely what occurred in this situation and what safeguards TikTok may implement to prevent internal misuse of user data going forward. For now, the incident has added to mistrust and scrutiny of ByteDance as it aims to grow TikTok’s global userbase. Users, regulators, and observers will watch closely for signs of improved accountability and protection of user data.
Going forward, ByteDance faces pressure to enforce stricter controls preventing employee exploitation of TikTok user data. However, doubts persist over whether China-based tech firms can operate globally while adhering to norms around privacy and avoiding content manipulation. For TikTok to maintain growth, ByteDance must provide convincing evidence of reforms in transparency, governance, and data practices. Overall, the situation highlights ongoing tensions at the intersection of technology, geopolitics, free speech, and national security.
