Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Compliance

Activists Allege TikTok Violated Agreement on Child Protection

A coalition of consumer groups filed a complaint Thursday with US regulators claiming the popular video app TikTok has failed to live up to an agreement last year limiting data collection from children.

A coalition of consumer groups filed a complaint Thursday with US regulators claiming the popular video app TikTok has failed to live up to an agreement last year limiting data collection from children.

The 20 organizations said in a Federal Trade Commission complaint that TikTok continues to collect data on children under 13 without parental consent despite a February 2019 US court settlement.

The complaint called for the FTC to reopen its investigation, saying the matter is urgent now as more children flock to social media apps during the coronavirus lockdowns.

According to the complaint, TikTok, owned by Chinese tech company ByteDance, makes it easy for under-13 users to avoid obtaining parental consent and makes no attempt to notify parents.

As a result, TikTok is able to collect detailed information about how these children use the app and applies artificial intelligence to determine what to show next, to keep them engaged online as long as possible.

“Even after being caught red-handed by the FTC, TikTok continues to flout the law,” said Josh Golin, executive director of Campaign for a Commercial-Free Childhood, one of the groups in the complaint.

“We urge the Commission to take swift action and sanction TikTok again — this time with a fine and injunctive relief commensurate with the seriousness of TikTok’s serial violations.”

TikTok last year paid a $5.7 million penalty under a court settlement and agreed to implement policy changes including deleting any information collected from children under 13.

Advertisement. Scroll to continue reading.

But the complaint said that TikTok destroyed “only the personal information of users who identified as under 13 at the time of the decree or at the time their personal information was collected,” which allowed it to keep some of this data.

“We easily found that many accounts featuring children were still present on TikTok,” said Michael Rosenbloom of the Georgetown University Institute for Public Representation, which represents the groups.

“Many of these accounts have tens of thousands to millions of followers, and have been around since before the order.”

Asked about the latest complaint, TikTok said it had implemented detailed policies on accounts for young children.

“We take privacy seriously and are committed to helping ensure that TikTok continues to be a safe and entertaining community for our users,” it said in a statement.

The tracking firm Sensor Tower reported last month that TikTok had topped two billion downloads amid strong growth during the virus pandemic.

Research firm eMarketer estimated that TikTok had more than 52 million US users in March.

Related: China’s TikTok Lures ADP Security Chief to Become New CISO

Related: China-Made TikTok App Riddled With Security Holes: Researchers

Related: U.S. Senators Seek to Ban TikTok on Government Devices

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

Compliance

The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...

Compliance

Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...

Artificial Intelligence

Two of humanity’s greatest drivers, greed and curiosity, will push AI development forward. Our only hope is that we can control it.

Data Protection

While quantum-based attacks are still in the future, organizations must think about how to defend data in transit when encryption no longer works.

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...