TikTok's Child Data Protection Deemed Inadequate by Canadian Privacy Authorities
A joint investigation by Canadian federal and provincial privacy authorities has found that TikTok's efforts to protect children on its platform and prevent the collection of their sensitive personal information are "inadequate." The investigation, launched in 2023, revealed that TikTok has been collecting data from hundreds of thousands of Canadian children under the age of 13, despite its terms of service prohibiting such use.
Key Findings of the Investigation
The investigation, led by Privacy Commissioner of Canada Philippe Dufresne and his counterparts in Quebec, British Columbia, and Alberta, focused on TikTok's privacy practices concerning younger users. The authorities examined whether valid and meaningful consent was being obtained for the collection, use, and disclosure of personal information.
- Inadequate Age Verification: The investigation found that TikTok's age-assurance measures were largely ineffective, resulting in the collection of personal information from a large number of Canadian children.
- Data Collection and Profiling: TikTok collects a wide array of user data, including date of birth, location data, browsing behavior, and even biometric data such as facial recognition and voice data. This information is then used to create detailed profiles of users, including children.
- Targeted Advertising and Content: The collected data is used to deliver targeted advertising and personalized content to users, including children, which can have potentially harmful impacts, such as the normalization of gambling, the reinforcement of gender stereotypes, and the promotion of negative body images.
- Lack of Transparency: TikTok failed to adequately explain its data collection practices to users, including how biometric information is used. The privacy policies lacked details and were difficult to find, particularly in French, one of Canada's official languages.
TikTok's Response and Commitments
In response to the investigation, TikTok has agreed to enhance its age-assurance methods to prevent underage users from accessing the platform and to improve communication regarding data usage, especially for younger users. TikTok claims it removes approximately 500,000 underage users from the platform each year. However, privacy watchdogs intend to follow up to ensure these age verification measures are improved.
TikTok has also committed to restricting advertisers from targeting users under 18, except based on general categories like language and approximate location, and to expanding privacy information available to Canadian users. A TikTok spokesperson stated the company remains committed to maintaining strong transparency and privacy practices.
Concerns Over Data Access and National Security
Beyond privacy concerns, there are also concerns about potential national security risks due to TikTok's ownership by Chinese company ByteDance Ltd. There are concerns that the Chinese government could exploit the app for data collection or to further its interests. There are suggestions that the policy should explicitly say that this information can go to China and be accessed by the Chinese government.
The Canadian government previously ordered TikTok to dissolve its Canadian operation following a national security review. This decision, based on advice from Canada’s security and intelligence community, has faced backlash from Canadian creators and artists.
Expert and Official Perspectives
Privacy Commissioner Dufresne emphasized the need for organizations subject to Canadian privacy law to prioritize the best interests of young Canadians. British Columbia Privacy Commissioner Michael Harvey expressed surprise at the sophisticated user profiles created by TikTok and called for addressing the root causes of risks to children on the platform.
Alberta Information and Privacy Commissioner Diane McLeod highlighted the wide spectrum of risks and harms that children on TikTok are exposed to, including age-inappropriate content and targeted ads. She emphasized the importance of monitoring the situation and working with TikTok to ensure the implementation of agreed-upon recommendations.
