{"id":5317,"date":"2023-03-28T10:00:09","date_gmt":"2023-03-28T15:00:09","guid":{"rendered":"https:\/\/blogs.luc.edu\/compliance\/?p=5317"},"modified":"2023-03-28T10:00:09","modified_gmt":"2023-03-28T15:00:09","slug":"the-committee-on-foreign-investment-of-the-u-s-cracks-down-on-tiktok-is-a-potential-ban-on-the-horizon","status":"publish","type":"post","link":"https:\/\/blogs.luc.edu\/compliance\/?p=5317","title":{"rendered":"The Committee on Foreign Investment of the U.S. Cracks Down on Tiktok: Is a Potential Ban on the Horizon?"},"content":{"rendered":"

Danielle McNamara<\/em><\/p>\n

Senior Editor <\/em><\/p>\n

Loyola University Chicago School of Law, JD 2023<\/em><\/p>\n

Since 2019, TikTok and ByteDance, its parent company, officials have been negotiating with the Committee on Foreign Investment of the United States (CFIUS) regarding required technical safeguards they will need to adopt to be in compliance with US national security concerns. The popular social media app, which gained traction during the beginning of 2020 amidst the Covid-19 pandemic, has been scrutinized by many officials regarding concerns for user privacy. Currently, the Biden administration has been working to encourage TikTok\u2019s Chinese owners to sell<\/a> their investment in the app or face a potential national ban in the U.S.. However, Tiktok representatives argue this will not alleviate concerns about user data privacy.<\/span><\/p>\n

Data protection concerns <\/strong><\/span><\/p>\n

The U.S. government\u2019s initial concerns<\/a> have centered around the ability of employees at Tiktok to access the personal data of the app\u2019s billion-plus users, creating the possibility of the spread of misinformation and threats of espionage. The Federal Communications Commission and the Federal Bureau of Investigation have also warned that ByteDance could share<\/a> Tiktok user data including location, browsing history, and biometric identifiers with the Chinese government. These concerns arise out of a law implemented by China in 2017 that requires companies give any personal data relevant to the country\u2019s national security. However, there is currently no evidence that Tiktok has turned over user data to the Chinese government.<\/span><\/p>\n

Trump administration\u2019s failed ban on Tiktok <\/strong><\/span><\/p>\n

The Trump administration planned to effectively ban<\/a> Tiktok and WeChat, another Chinse based app, in the United States via issuance of two executive orders on August 6, 2020. The orders declared that both apps posed threats to national security because they \u201ccollected vast swaths of data on Americans and other users and offered the Chinese Communist Party avenues for censoring or distorting information.\u201d<\/span><\/p>\n

However, the US District Court in San Francisco issued an order in September of 2020 halting both executive orders after granting a group of WeChat users\u2019 motion to stop the ban. The court stated that the plaintiffs had shown there are \u201cserious questions\u201d related to their First Amendment claim, which argued that WeChat represents a virtual public square for Chinese speakers in the United States, and such a ban would harm free speech. Likewise, a separate order by the Commerce Department delayed the Tiktok ban due to a possible deal to give Oracle Corp. oversight of its U.S. user data.<\/span><\/p>\n

Proposed deal with Oracle Corp. <\/strong><\/span><\/p>\n

Since 2019, Tiktok and ByteDance have been working on a proposal<\/a> to present to CFIUS in an attempt to protect against a United States ban of the social media app. The proposal, titled \u201cProject Texas<\/a>\u201d includes partnering with software giant Oracle Corp. to store all US user data within the United States and creates a new U.S. government-controlled corporation, US Data Security (USDS), that would monitor the data of U.S. users. This proposal would give Oracle access to audit its content moderation policies and algorithms. The project has involved a team of lobbyists, academic researchers, and think tank writers, in an effort that cost approximately $1.5 billion dollars to create. However, CFIUS has yet to approve the plan in its entirety and has not released any information regarding its decision.<\/span><\/p>\n

It is also worth noting that in Oracle is currently fighting off<\/a> a class-action lawsuit where plaintiffs claim that the company tracks and collects the personal information of billions of people, creating revenues of over $40 billion a year. The lawsuit, filed in the US District Court for the Northern District of California, alleges that Oracle has violated the Federal Electronic Communications Privacy Act<\/a>, California state constitution, and the California Invasion of Privacy Act<\/a>. However, in the most recent oral arguments Oracle\u2019s counsel claims that plaintiff\u2019s complaint fails for being too generalized a grievance.<\/span><\/p>\n

Tiktok\u2019s potential divestment <\/strong><\/span><\/p>\n

In early March of this year, the CFIUS presented Tiktok with a series of options, one being divestiture, in an attempt to address security concerns in the United States. However, Tiktok representatives have stated that calls for its Chinese owner to divest its stake in the company are unfounded<\/a> because such as sale would not actually remedy security concerns regarding the app\u2019s handling of US consumer data. One representative states, \u201cIf protecting national security is the objective, divestment does not solve the problem: a change in ownership would not impose any new restrictions on data flows or access.\u201d Tiktok instead argues that involvement of third-party monitoring, verification, and vetting of U.S. user data and systems, which it has already started implementing, would provide more comprehensive data protection.<\/span><\/p>\n

A forced divestiture may also face legal action<\/a> from ByteDance, as the company was founded by Chinese investors and is not currently controlled by any governmental entity. Approximately 60 percent of ByteDance\u2019s shares are owned by institutional investors, 20 percent by company employees, and 20 percent by the ByteDance founders.<\/span><\/p>\n

What\u2019s to come? <\/strong><\/span><\/p>\n

At the moment, there are almost no national laws in the United States that will prevent people, companies, or governments from harvesting user data for profit or otherwise. Within the recent past, there have been numerous issues arising within the sphere of data brokers, or companies that collect and compile personal data which they then sell to other businesses. This collection is typically done through the gathering of data on social media websites. At least 25 states and Puerto Rico have introduced or considered almost 140 consumer privacy bills<\/a> in 2023, and of those only five states have actually enacted comprehensive consumer privacy laws.<\/span><\/p>\n

Whether or not Tiktok is banned in the United States, it seems that data privacy risks are apparent everywhere, and until there is more comprehensive legislation, removing Tiktok from U.S. users\u2019 app stores is only the tip of the ice burg in the grand scheme of data privacy. Although it appears that the federal government\u2019s concerns are primarily focused on national security issues, even if a forced divestiture occurs, it seems that user data would be far from \u201csecure\u201d in the hands of large corporations that stand to make billions for selling user data.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Since 2019, TikTok and ByteDance, its parent company, officials have been negotiating with the Committee on Foreign Investment of the United States (CFIUS) regarding required technical safeguards they will need to adopt to be in compliance with US national security concerns. The popular social media app, which gained traction during the beginning of 2020 amidst the Covid-19 pandemic, has been scrutinized by many officials regarding concerns for user privacy. Currently, the Biden administration has been working to encourage TikTok\u2019s Chinese owners to sell their investment in the app or face a potential national ban in the U.S.. However, Tiktok representatives argue this will not alleviate concerns about user data privacy.<\/p>\n","protected":false},"author":97,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41],"tags":[1205,1623],"class_list":["post-5317","post","type-post","status-publish","format-standard","hentry","category-national-security","tag-journal-of-regulatory-compliance","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/5317","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/users\/97"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5317"}],"version-history":[{"count":0,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=\/wp\/v2\/posts\/5317\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5317"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5317"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.luc.edu\/compliance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5317"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}