Ensuring Data Security and Privacy at TikTok

TikTok is committed to ensuring the security, privacy, and safety of user data. They have established a new division called U.S. Data Security (USDS) to enhance their efforts in strengthening data protection policies and protocols.

Access Control

TikTok aims to minimize the number of people with access to data and restrict it to those who require it for their job responsibilities. They have implemented policies and procedures that limit internal access to user data by employees, regardless of their location. Access to data is subject to stringent controls, safeguards like encryption, and authorization approval protocols overseen by the U.S.-based security team.

Data Transfers

TikTok is actively working to reduce data transfers across regions. They route all U.S. traffic through Oracle Cloud Infrastructure and are strengthening their engineering capabilities in the United States. The goal is to limit access to U.S. user data by individuals outside of USDS and ensure robust data access protocols with monitoring and oversight mechanisms provided by Oracle.

Security Standards

TikTok's global security team continuously works to stay ahead of emerging cyber threats. They validate their security standards and collaborate with industry-leading experts to test their defenses. TikTok has obtained ISO 27001 certifications in multiple countries, demonstrating their investment in people, processes, and technology to ensure the safety of their community. They have also been certified by the ioXt Alliance for meeting rigorous standards and commitments to cybersecurity, transparency, and privacy.

TikTok is dedicated to earning and maintaining the trust of its global community. They remain focused on protecting their platform and providing a safe, welcoming, and enjoyable experience.