'They're Being Sued All Over the Place.' TikTok Comes Under More Scrutiny Over Children's Privacy Concerns

'They're Being Sued All Over the Place.' TikTok Comes Under More Scrutiny Over Children's Privacy Concerns

A coalition of child privacy protection advocacy groups filed a complaint on Thursday with the U.S. Federal Trade Commission against TikTok.

The complaint presents evidence to the regulatory body that the popular social media app is violating the Children's Online Privacy Protection Act (COPPA) and flouting terms agreed to following a previous investigation into similar violations. That affair resulted in TikTok being fined $5.7 million in 2019 by the FTC – a sum that sources tell dot.LA was at that time the largest amount ever levied by the Commission.

The complaint states that under those terms, issued via consent decree, "TikTok agreed to...destroy all personal information collected from users under 13 years of age. In fact, however,...we found that TikTok currently has many regular account holders who are under age 13, and many of them still have videos of themselves that were uploaded as far back as 2016."

Moreover, contrary to the agreed-upon terms, "TikTok fails to make reasonable efforts to ensure that a parent of a child receives direct notice of its practices regarding the collection, use, or disclosure of personal information. Indeed, TikTok does not at any point contact the child's parents to give them notice and does not even ask for contact information for the child's parents."

A TikTok spokesperson said in a statement that the company takes privacy "seriously and (we) are committed to helping ensure that TikTok continues to be a safe and entertaining community for our users."

The company said it has put in place "view-only" TikTok experiences for users who are under 13 in the U.S., which bars them from sharing personal information and "extensively" limits content and user interaction so that they cannot share videos, comment on videos, message users, or maintain a profile or followers. But, of course, that is dependent on the user not lying about their age.

There is also a separate privacy policy for younger users that involves the collection of only limited information, including username, password and birthday, the company said. TikTok collects information like device ID, its IP address, videos watched and other usage data automatically.

The company is vague about how that information is shared, but does note on its website that it's shared with the company's "corporate group and service providers as necessary for them to perform a business purpose, professional service, or technology support function for us."

Culver City-based TikTok, which is owned by Beijing-based technology firm ByteDance Ltd., has received much scrutiny from the national security community. The app is no longer allowed on Australian Defense Department devices following a similar ban by the Pentagon due to national security concerns surrounding China's potential access to data. ByteDance has said that all U.S. user data is stored in the United States and Singapore, not on Chinese servers.

But TikTok's legal issues don't stop there.

"They're being sued all over the place," noted Cynthia Cole, special counsel at Palo Alto-based Baker Botts, specializing in data privacy and technology. "This is just the beginning."

Just this year, regulatory authorities have reportedly called for separate investigations into TikTok regarding privacy concerns in Colombia, the Netherlands and Italy. In the U.S., TikTok is currently fighting multiple class action lawsuits.

On Monday, a bipartisan group of senators urged the FTC to investigate the "collection and processing practices" of companies that market to children on the internet as it reviews the COPPA rule to ensure privacy safeguards are effective for kids online today.

The letter by Sens. Edward J. Markey, D-Mass., Josh Hawley, R-Mo., Richard Blumenthal, D-Conn, Bill Cassidy, R-La., Dick Durbin, D-Ill. and Marsha Blackburn, R-Tenn., was sent as the skyrocketing use of technology amid the COVID-19 pandemic prompted the FTC to fast-track its scheduled review of COPPA.

The letter noted that "children are a uniquely vulnerable population that deserve heightened privacy protections. The FTC should take extreme caution not to weaken – either purposefully or inadvertently – privacy protections under COPPA."

What Happens Now?

"The FTC will likely investigate, and if they do find that TikTok didn't adhere to (the consent decree), then there will be an additional fine that will be much more punitive," said Cole. She also noted that the regulatory body may be politically motivated to come down hard, in order to show their importance and make a case that they deserve more funding and authority in the future.

The FTC can fine up to $42,350 per violation, which in this case would be each user under the age of 13. It's unclear how many of TikTok's some 160 million users in the U.S. are underage.

And it could get even worse for TikTok. The havoc that the COVID-19 crisis has wrought on municipal coffers, Cole noted, could be "pretty significant motivation for states to bring their own actions."

California, which on January 1 of this year enacted the California Consumer Privacy Act (CCPA), is a prime candidate. That legislation will start being enforced July 1.

"This paves the way for CCPA enforcement," Cole said. "This could be an easy win for (California's Attorney General)."

And with a public paper trail, TikTok could become a relatively easy target for an ongoing spiral of litigation.

"This is the tip of the iceberg," said Cole.


Subscribe to our newsletter to catch every headline.


Despite — or in many cases because of — the raging pandemic, 2020 was a great year for many tech startups. It turned out to be an ideal time to be in the video game business, developing a streaming ecommerce platform for Gen Z, or helping restaurants with their online ordering.

But which companies in Southern California had the best year? That is highly subjective of course. But in an attempt to highlight who's hot, we asked dozens of the region's top VCs to weigh in.

We wanted to know what companies they wish they would have invested in if they could go back and do it all over again.

Read more Show less
Ben Bergman

Ben Bergman is the newsroom's senior finance reporter. Previously he was a senior business reporter and host at KPCC, a senior producer at Gimlet Media, a producer at NPR's Morning Edition, and produced two investigative documentaries for KCET. He has been a frequent on-air contributor to business coverage on NPR and Marketplace and has written for The New York Times and Columbia Journalism Review. Ben was a 2017-2018 Knight-Bagehot Fellow in Economic and Business Journalism at Columbia Business School. In his free time, he enjoys skiing, playing poker, and cheering on The Seattle Seahawks.


Pejman Nozad, a founding managing partner at Pear VC, joins this episode of LA Venture to discuss Pear VC's current initiatives, including its accelerator and fellowships. He's seen as one of the most successful angel investors in the area, and for good reason: he has made more than 300 investments in his lifetime.

Read more Show less
Minnie Ingersoll
Minnie Ingersoll is a partner at TenOneTen and host of the LA Venture podcast. Prior to TenOneTen, Minnie was the COO and co-founder of $100M+ Shift.com, an online marketplace for used cars. Minnie started her career as an early product manager at Google. Minnie studied Computer Science at Stanford and has an MBA from HBS. She recently moved back to L.A. after 20+ years in the Bay Area and is excited to be a part of the growing tech ecosystem of Southern California. In her space time, Minnie surfs baby waves and raises baby people.