{"id":23463,"date":"2023-03-09T02:36:39","date_gmt":"2023-03-09T10:36:39","guid":{"rendered":"https:\/\/www.privateinternetaccess.com\/blog\/?p=23463"},"modified":"2024-01-24T02:21:23","modified_gmt":"2024-01-24T10:21:23","slug":"tiktok-bans-good-for-privacy","status":"publish","type":"post","link":"https:\/\/www.privateinternetaccess.com\/blog\/tiktok-bans-good-for-privacy\/","title":{"rendered":"TikTok Bans Miss the Point, But Are Still Great News for Privacy"},"content":{"rendered":"\n

Privacy concerns about the social media platform TikTok<\/a>, owned by the Chinese company ByteDance<\/a>, are not new. We\u2019ve been reporting on them<\/a> on the PIA blog for several years. More recently, though, the worries seem to have increased, and the calls for TikTok to be banned have grown louder and more widespread. That\u2019s bad news for TikTok, but could be great news for privacy in general.<\/p>\n\n\n\n

Although not without its irony, it is certainly fitting that one of the most privacy-invasive apps is the final straw that leads to the wide public becoming aware of the fight for individual privacy. Under these circumstances, we should also take a careful look at Google and Meta (previously Facebook), both of which are just as problematic from the perspective of privacy.<\/p>\n\n\n\n

How TikTok Is Shining a Spotlight on Privacy<\/h2>\n\n\n\n

The company\u2019s case was not helped by a specific incident last year that made headlines. In October, Forbes published a story alleging that TikTok\u2019s parent company, ByteDance, planned to use its TikTok app to monitor the personal location<\/a> of specific US citizens. At the time, TikTok did not deny the surveillance capability, but claimed on Twitter<\/a> that \u201cTikTok has never been used to \u201ctarget\u201d any members of the U.S. government, activists, public figures or journalists, nor do we serve them a different content experience than other users.\u201d <\/p>\n\n\n\n

Two months later, Forbes reported that was precisely what some TikTok employees had done<\/a>:<\/p>\n\n\n\n

\n

An internal investigation by ByteDance, the parent company of video-sharing platform TikTok, found that employees tracked multiple journalists covering the company, improperly gaining access to their IP addresses and user data in an attempt to identify whether they had been in the same locales as ByteDance employees.<\/p>\n<\/blockquote>\n\n\n\n

TikTok said of the surveillance: \u201cThe misconduct of certain individuals, who are no longer employed at ByteDance, was an egregious misuse of their authority to obtain access to user data.\u201d Their reply did not engage with the central problem, which was never who <\/em>had carried out the surveillance, but that it was possible at all, and had happened without managers being aware of it. <\/p>\n\n\n\n

Under these circumstances, it\u2019s no wonder that countries around the world have started implementing various kinds of TikTok bans. For example<\/a>, in December 2022 the New York Times reported:<\/p>\n\n\n\n

\n

In the past several weeks, at least 14 [US] states have banned TikTok on government-issued devices. In Congress, lawmakers are expected to vote this week on a sweeping spending bill that includes a ban of TikTok on all federal government devices. A separate bipartisan bill, which was introduced in Congress last week, would ban the app for everyone in the United States. In addition, Indiana\u2019s attorney general has sued TikTok, accusing the company of being deceptive about the security and privacy risks the app poses.<\/p>\n<\/blockquote>\n\n\n\n

TikTok Bans Become a Global Phenomenon<\/h2>\n\n\n\n

More recently, the anti-TikTok rhetoric has been taken up a notch. The Republican chair of a US congressional committee, Michael McCaul, described TikTok as a \u201cspy balloon in your phone<\/a>.\u201d He was alluding to the recent incident of the suspected Chinese spy balloon<\/a> that was shot down over the US, and which has soured relations between the two countries.<\/p>\n\n\n\n

TikTok could be one of the main victims of this recent political chill, as the US House Foreign Affairs Committee has voted to advance a bill that would allow President Biden to ban TikTok completely in the US<\/a>, where it is used by over 100 million people. If this ever happens, it would certainly be the icing on the irony cake, as one of the first decisions President Biden made was to undo President Trump\u2019s ban on TikTok.<\/p>\n\n\n\n

TikTok Has Even More Issues with the EU<\/h3>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

The US is not alone in locking TikTok out from government devices. Canada has also issued a ban<\/a>, as has the European Commission<\/a> and the European Parliament<\/a>. TikTok faces even more problems in the EU thanks to the region\u2019s tough GDPR privacy laws. <\/p>\n\n\n\n

In September 2021, the Irish Data Protection Commission (DPC) opened two inquiries into the Chinese-owned company<\/a>. For one, concerning TikTok\u2019s processing of children\u2019s personal data<\/a>, the DPC has submitted a draft decision to the other EU data protection authorities. The other, regarding TikTok\u2019s transfers of personal data to China and its compliance with the GDPR in terms of personal data transfers to third countries, is still on-going.<\/p>\n\n\n\n

To address the concerns about the transfer of EU citizens\u2019 personal data outside the EU, TikTok is opening a second data center in Ireland. Its aim is to \u201creduce employee access to European user data; minimizing data flows outside of Europe; and storing European user data locally,\u201d according to a report on the Silicon Republic site<\/a>. It will also use a third site in Norway<\/a> for storing the data of European users. A similar localization approach<\/a> is being discussed with the US government, in the hopes of staving off a complete ban there.<\/p>\n\n\n\n

Are TikTok Bans Effective?<\/h2>\n\n\n\n

In any case, even a total ban would not stop the flow of personal information to TikTok. Gizmodo found that over 28,000 apps use TikTok\u2019s software development kits<\/a> to integrate their services with TikTok\u2019s systems. <\/p>\n\n\n\n

By integrating TikTok in other apps, the latter also send ByteDance user data, in the same way that huge numbers of apps routinely send users\u2019 personal information to Google and Facebook. This underlines the fact that the real problem here is not TikTok, but the entire surveillance advertising<\/a> business model underlying social media, something that we\u2019ve warned about many times. <\/p>\n\n\n\n

As Evan Greer, director of Fight for the Future, explained during the launch<\/a> of the #DontBanTikTok<\/a> campaign:<\/p>\n\n\n\n

\n

TikTok uses the exact same surveillance capitalist business model of services like YouTube and Instagram. Yes, it\u2019s concerning that the Chinese government could abuse data that TikTok collects. But even if TikTok were banned, they could access much of the same data simply by purchasing it from data brokers, because there are almost no laws in place to prevent that kind of abuse.<\/p>\n<\/blockquote>\n\n\n\n

As Greer rightly notes, we don\u2019t need hollow bans on particular services, but strong privacy laws that tackle the abuse of personal data by social media as a whole. For all its faults, the GDPR does this to a degree in the EU, but the US still lacks a broad federal data protection law<\/a> that would rein in the massive and continuing abuse of privacy by all the social media giants, not just the ones who happen to be owned by Chinese companies. <\/p>\n\n\n\n

Although the current political grandstanding over TikTok bans misses the point, it does have the benefit that more people are talking about privacy and its protection than ever before.<\/p>\n\n\n\n