TikTok Faces Senate Scrutiny Over Data Collection Practices

TikTok Faces Scrutiny Over Biometric Data Collection

During its inaugural appearance before Congress, TikTok evaded direct responses regarding its intentions for the biometric data its privacy policy allows it to gather from U.S. users. A recent update to the company’s U.S. privacy policy, implemented in June, introduced a clause stating the app “may collect biometric identifiers and biometric information” from user-generated content, encompassing elements like “faceprints and voiceprints.”

Lawmakers Question Data Practices

Multiple legislators questioned TikTok representatives on this subject during a hearing held by the Senate Subcommittee on Consumer Protection, Product Safety, and Data Security.

Although the hearing primarily addressed the potentially harmful effects of social media on children and teenagers, the scope broadened as lawmakers investigated the business strategies, internal studies, and policies of Snap, TikTok, and YouTube.

Concerns Raised About Data Scope

Senator Marsha Blackburn (R-TN) specifically inquired about the rationale behind TikTok’s collection of extensive biometric data, including “faceprints, voiceprints, geolocation information, browsing and search history,” alongside “keystroke patterns and rhythms.”

Michael Beckerman, TikTok’s VP and Head of Public Policy, responded by asserting that numerous external researchers and experts have determined TikTok collects less data compared to many other social media platforms.

He later clarified that keystroke pattern collection is utilized to mitigate spam bots.

“Virtual Dossiers” and User Profiling

Blackburn further pressed for clarification on whether TikTok was compiling a detailed profile – a “virtual dossier” – on each user, including minors, integrating their biometric data with their interests and search activity.

Beckerman refrained from directly addressing this question, stating, “TikTok is an entertainment platform where people watch and enjoy and create short-form videos. It’s about uplifting, entertaining content.”

Data Usage Transparency

Despite some ambiguity in the questioning, a complete understanding of how TikTok utilizes the data it collects remains unclear, beyond what is detailed in its privacy policy and its 2020 blog post regarding recommendation algorithms. TikTok’s policy head avoided providing clarity on its plans for biometric data collection concerning younger users.

Extent of Data Collection Debated

Senator Cynthia Lummis (R-WY) followed up, questioning whether the extensive “mass data collection” was essential for providing a quality user experience. She highlighted that the company’s policy permits the collection of location, device details, browsing history (both within and outside TikTok), messages, IP address, and biometric data.

Beckerman responded by stating that “some of those items that you listed off are things that we’re not currently collecting.”

He added that TikTok would seek user consent before initiating the collection of such data in the future.

Biometric Data Collection and Consent

These statements likely referred to the clause concerning biometric data collection. While TikTok declined to elaborate on the product developments prompting the inclusion of biometric data in its disclosures, the company previously stated it would request user consent before implementing such data collection practices.

The committee indicated it would seek further information from TikTok on this matter.

Geopolitical and Transparency Concerns

Both senators expressed concerns regarding TikTok’s ties to China, given its parent company, ByteDance, is based in Beijing. However, the issue of excessive user data collection – particularly concerning children – extends beyond geopolitical considerations and represents a matter of transparency.

User Rights and Data Control

Privacy and security experts generally agree that users should be informed about why a company requires specific data, how it will be used, and have the ability to decline sharing that information. Users can currently limit data collection by adjusting settings on their smartphones. Apple’s iOS, for example, provides opt-out options and prompts for consent when apps request access to location, microphone, camera, or contacts.

However, apps can still track significant amounts of data even with these restrictions in place.

Engagement Metrics and User Retention

Following the discussion on data collection, Senator Lummis inquired whether TikTok was designed to maximize user engagement. A wealth of user data could significantly contribute to this goal.

Beckerman highlighted the app’s “take a break” reminders and parental controls for managing screen time.

Lummis clarified that she wanted to know if “length of engagement” was a key metric for evaluating the company’s success.

Beckerman avoided a direct answer, stating, “there’s multiple definitions of success” and that “it’s not just based on how much time somebody’s spending [on the app].”

Lummis repeatedly asked the question, while Beckerman continued to deflect, stating only that “overall engagement is more important than the amount of time that’s being spent.”

When pressed directly, “But is it one of the metrics?,” Beckerman conceded, “It’s a metric that I think many platforms check on how much time people are spending on the app.”