Child Privacy Advocates Take Aim at TikTok, Adding More Legal Issues for the Social Media App

Child Privacy Advocates Take Aim at TikTok, Adding More Legal Issues for the Social Media App

A coalition of child privacy protection advocacy groups filed a complaint on Thursday with the U.S. Federal Trade Commission against TikTok.

The complaint presents evidence to the regulatory body that the popular social media app is violating the Children's Online Privacy Protection Act (COPPA) and flouting terms agreed to following a previous investigation into similar violations. That affair resulted in TikTok being fined $5.7 million in 2019 by the FTC – a sum that sources tell dot.LA was at that time the largest amount ever levied by the Commission.


The complaint states that under those terms, issued via consent decree, "TikTok agreed to...destroy all personal information collected from users under 13 years of age. In fact, however,...we found that TikTok currently has many regular account holders who are under age 13, and many of them still have videos of themselves that were uploaded as far back as 2016."

Moreover, contrary to the agreed-upon terms, "TikTok fails to make reasonable efforts to ensure that a parent of a child receives direct notice of its practices regarding the collection, use, or disclosure of personal information. Indeed, TikTok does not at any point contact the child's parents to give them notice and does not even ask for contact information for the child's parents."

A TikTok spokesperson said in a statement that the company takes privacy "seriously and (we) are committed to helping ensure that TikTok continues to be a safe and entertaining community for our users."

The company said it has put in place "view-only" TikTok experiences for users who are under 13 in the U.S., which bars them from sharing personal information and "extensively" limits content and user interaction so that they cannot share videos, comment on videos, message users, or maintain a profile or followers. But, of course, that is dependent on the user not lying about their age.

There is also a separate privacy policy for younger users that involves the collection of only limited information, including username, password and birthday, the company said. TikTok collects information like device ID, its IP address, videos watched and other usage data automatically.

The company is vague about how that information is shared, but does note on its website that it's shared with the company's "corporate group and service providers as necessary for them to perform a business purpose, professional service, or technology support function for us."

Culver City-based TikTok, which is owned by Beijing-based technology firm ByteDance Ltd., has received much scrutiny from the national security community. The app is no longer allowed on Australian Defense Department devices following a similar ban by the Pentagon due to national security concerns surrounding China's potential access to data. ByteDance has said that all U.S. user data is stored in the United States and Singapore, not on Chinese servers.

But TikTok's legal issues don't stop there.

"They're being sued all over the place," noted Cynthia Cole, special counsel at Palo Alto-based Baker Botts, specializing in data privacy and technology. "This is just the beginning."

Just this year, regulatory authorities have reportedly called for separate investigations into TikTok regarding privacy concerns in Colombia, the Netherlands and Italy. In the U.S., TikTok is currently fighting multiple class action lawsuits.

On Monday, a bipartisan group of senators urged the FTC to investigate the "collection and processing practices" of companies that market to children on the internet as it reviews the COPPA rule to ensure privacy safeguards are effective for kids online today.

The letter by Sens. Edward J. Markey, D-Mass., Josh Hawley, R-Mo., Richard Blumenthal, D-Conn, Bill Cassidy, R-La., Dick Durbin, D-Ill. and Marsha Blackburn, R-Tenn., was sent as the skyrocketing use of technology amid the COVID-19 pandemic prompted the FTC to fast-track its scheduled review of COPPA.

The letter noted that "children are a uniquely vulnerable population that deserve heightened privacy protections. The FTC should take extreme caution not to weaken – either purposefully or inadvertently – privacy protections under COPPA."

What Happens Now?

"The FTC will likely investigate, and if they do find that TikTok didn't adhere to (the consent decree), then there will be an additional fine that will be much more punitive," said Cole. She also noted that the regulatory body may be politically motivated to come down hard, in order to show their importance and make a case that they deserve more funding and authority in the future.

The FTC can fine up to $42,350 per violation, which in this case would be each user under the age of 13. It's unclear how many of TikTok's some 160 million users in the U.S. are underage.

And it could get even worse for TikTok. The havoc that the COVID-19 crisis has wrought on municipal coffers, Cole noted, could be "pretty significant motivation for states to bring their own actions."

California, which on January 1 of this year enacted the California Consumer Privacy Act (CCPA), is a prime candidate. That legislation will start being enforced July 1.

"This paves the way for CCPA enforcement," Cole said. "This could be an easy win for (California's Attorney General)."

And with a public paper trail, TikTok could become a relatively easy target for an ongoing spiral of litigation.

"This is the tip of the iceberg," said Cole.

Subscribe to our newsletter to catch every headline.

Minutes into filling out my absentee ballot last week, I was momentarily distracted by my dog Seamus. A moment later, I realized in horror that I was filling in the wrong bubble — accidentally voting "no" on a ballot measure that I meant to vote "yes" on.

It was only a few ink marks, but it was noticeable enough. Trying to fix my mistake, I darkly and fully filled in the correct circle and then, as if testifying to an error on a check, put my initials next to the one I wanted.

Then I worried. As a reporter who has previously covered election security for years, I went on a mini-quest trying to understand how a small mistake can have larger repercussions.

As Los Angeles County's 5.6 million registered voters all receive ballots at home for the first time, I knew my experience could not be unique. But I wondered, would my vote count? Or would my entire ballot now be discarded?

Read more Show less

You'll soon be able to take a rapid COVID-19 test before boarding a plane at Los Angeles International Airport.

Two design companies — one known for transforming shipping containers into pop-up businesses and homes, another that focuses on an eco-friendly approach to architecture — will erect modular COVID testing center at LAX by Nov. 1. New Jersey-based Clarity Labs will eventually staff those sites with technicians.

Read more Show less
RELATEDEDITOR'S PICKS

Trending