Child Privacy Advocates Take Aim at TikTok, Adding More Legal Issues for the Social Media App

Sam Blake

Sam primarily covers entertainment and media for dot.LA. Previously he was Marjorie Deane Fellow at The Economist, where he wrote for the business and finance sections of the print edition. He has also worked at the XPRIZE Foundation, U.S. Government Accountability Office, KCRW, and MLB Advanced Media (now Disney Streaming Services). He holds an MBA from UCLA Anderson, an MPP from UCLA Luskin and a BA in History from University of Michigan. Email him at samblake@dot.LA and find him on Twitter @hisamblake

Child Privacy Advocates Take Aim at TikTok, Adding More Legal Issues for the Social Media App

A coalition of child privacy protection advocacy groups filed a complaint on Thursday with the U.S. Federal Trade Commission against TikTok.

The complaint presents evidence to the regulatory body that the popular social media app is violating the Children's Online Privacy Protection Act (COPPA) and flouting terms agreed to following a previous investigation into similar violations. That affair resulted in TikTok being fined $5.7 million in 2019 by the FTC – a sum that sources tell dot.LA was at that time the largest amount ever levied by the Commission.

The complaint states that under those terms, issued via consent decree, "TikTok agreed to...destroy all personal information collected from users under 13 years of age. In fact, however,...we found that TikTok currently has many regular account holders who are under age 13, and many of them still have videos of themselves that were uploaded as far back as 2016."

Moreover, contrary to the agreed-upon terms, "TikTok fails to make reasonable efforts to ensure that a parent of a child receives direct notice of its practices regarding the collection, use, or disclosure of personal information. Indeed, TikTok does not at any point contact the child's parents to give them notice and does not even ask for contact information for the child's parents."

A TikTok spokesperson said in a statement that the company takes privacy "seriously and (we) are committed to helping ensure that TikTok continues to be a safe and entertaining community for our users."

The company said it has put in place "view-only" TikTok experiences for users who are under 13 in the U.S., which bars them from sharing personal information and "extensively" limits content and user interaction so that they cannot share videos, comment on videos, message users, or maintain a profile or followers. But, of course, that is dependent on the user not lying about their age.

There is also a separate privacy policy for younger users that involves the collection of only limited information, including username, password and birthday, the company said. TikTok collects information like device ID, its IP address, videos watched and other usage data automatically.

The company is vague about how that information is shared, but does note on its website that it's shared with the company's "corporate group and service providers as necessary for them to perform a business purpose, professional service, or technology support function for us."

Culver City-based TikTok, which is owned by Beijing-based technology firm ByteDance Ltd., has received much scrutiny from the national security community. The app is no longer allowed on Australian Defense Department devices following a similar ban by the Pentagon due to national security concerns surrounding China's potential access to data. ByteDance has said that all U.S. user data is stored in the United States and Singapore, not on Chinese servers.

But TikTok's legal issues don't stop there.

"They're being sued all over the place," noted Cynthia Cole, special counsel at Palo Alto-based Baker Botts, specializing in data privacy and technology. "This is just the beginning."

Just this year, regulatory authorities have reportedly called for separate investigations into TikTok regarding privacy concerns in Colombia, the Netherlands and Italy. In the U.S., TikTok is currently fighting multiple class action lawsuits.

On Monday, a bipartisan group of senators urged the FTC to investigate the "collection and processing practices" of companies that market to children on the internet as it reviews the COPPA rule to ensure privacy safeguards are effective for kids online today.

The letter by Sens. Edward J. Markey, D-Mass., Josh Hawley, R-Mo., Richard Blumenthal, D-Conn, Bill Cassidy, R-La., Dick Durbin, D-Ill. and Marsha Blackburn, R-Tenn., was sent as the skyrocketing use of technology amid the COVID-19 pandemic prompted the FTC to fast-track its scheduled review of COPPA.

The letter noted that "children are a uniquely vulnerable population that deserve heightened privacy protections. The FTC should take extreme caution not to weaken – either purposefully or inadvertently – privacy protections under COPPA."

What Happens Now?

"The FTC will likely investigate, and if they do find that TikTok didn't adhere to (the consent decree), then there will be an additional fine that will be much more punitive," said Cole. She also noted that the regulatory body may be politically motivated to come down hard, in order to show their importance and make a case that they deserve more funding and authority in the future.

The FTC can fine up to $42,350 per violation, which in this case would be each user under the age of 13. It's unclear how many of TikTok's some 160 million users in the U.S. are underage.

And it could get even worse for TikTok. The havoc that the COVID-19 crisis has wrought on municipal coffers, Cole noted, could be "pretty significant motivation for states to bring their own actions."

California, which on January 1 of this year enacted the California Consumer Privacy Act (CCPA), is a prime candidate. That legislation will start being enforced July 1.

"This paves the way for CCPA enforcement," Cole said. "This could be an easy win for (California's Attorney General)."

And with a public paper trail, TikTok could become a relatively easy target for an ongoing spiral of litigation.

"This is the tip of the iceberg," said Cole.

Subscribe to our newsletter to catch every headline.


'League of Legends' Developer and Publisher Hit by Hack, Source Code Stolen

Samson Amore

Samson Amore is a reporter for dot.LA. He holds a degree in journalism from Emerson College and previously covered technology and entertainment for TheWrap and reported on the SoCal startup scene for the Los Angeles Business Journal. Send tips or pitches to and find him on Twitter @Samsonamore.

'League of Legends' Developer and Publisher Hit by Hack, Source Code Stolen
Riot Games Press

It’s been a rough week for Riot Games.

Read moreShow less

Behind Her Empire: How Her Daughter’s Allergic Reaction Led Denise Woodard To Create Her Own Snack Company

Yasmin Nouri

Yasmin is the host of the "Behind Her Empire" podcast, focused on highlighting self-made women leaders and entrepreneurs and how they tackle their career, money, family and life.

Each episode covers their unique hero's journey and what it really takes to build an empire with key lessons learned along the way. The goal of the series is to empower you to see what's possible & inspire you to create financial freedom in your own life.

Behind Her Empire: How Her Daughter’s Allergic Reaction Led Denise Woodard To Create Her Own Snack Company
Denise Woodward

In 2016, Denise Woodard was on a conference call when her daughter had an allergic reaction to a snack containing peanuts and corn. This terrifying incident pushed Woodard to make a drastic life change and thus, her allergy-friendly snack company, Partake Foods, was born.

On this episode of Behind Her Empire, Woodard discusses the lessons she learned in her corporate roles and the arduous journey of building her company from the ground up.

Read moreShow less