TikTok’s CEO Interrogated Over Data Privacy

The CEO of TikTok Shou Zi Chew faced strong questioning about the social media app’s privacy from US legislators for more than five hours last week, about whether China has used the app to spy on American usersThe questions came from combative US lawmakers on both ends of the political spectrum over the video-sharing app's alleged ties to China and its potential danger to teenagers. 

TikTok has of millions of US users, and lawmakers have long held concerns over China’s control over the app. In particular, US Congress members expressed concerns about child safety on the app, asked for more parental controls and more comprehensive privacy legislation. 

The hearing marked the first ever appearance before US lawmakers by a TikTok chief executive, and a rare public outing for the 4o-year-old Chew, who has remained largely out of the limelight as the social network’s popularity soars. 

 When Rep. Neal Dunn asked Chew whether Bytedance, TikTok’s China-based parent company, “has spied on Americans at the direction of the Chinese Communist Party,” Chew said “no.” Mr Chew went on “Let me state this unequivocally: ByteDance is not an agent of China or any other country,” 

Dunn also mentioned a newspaper report published in October 2022, that focused on ByteDance’s plans to monitor the physical locations of some US TikTok users. “I don't think that ‘spying’ is the right way to describe it. This is ultimately an internal investigation,” Chew said.

The popular short-form video app has been in the lawmakers’ focus for years as it was possible that TikTok’s data could be accessed by ByteDance and then by the Chinese government

Chew was interrogators by included Rep. John Joyce, who asked about data security and TikTok’s plan to delete data rather than just move it from one server to another. “You have publicly stated that the nonpublic information of TikTok users in the United States is being transferred to an Oracle-based cloud infrastructure because of safety concerns…What’s the outline for dealing with that data that you’ve already amassed?” To which Mr Chew replied “All new data is already stored by default in this Oracle Cloud infrastructure" adding that the effort to move older data should be finished later this year. 

When pressed that TikTok only began planning to delete data after Congress asked about it earlier this month, Chew said TikTok hired a third-party auditor to help with the process and defended the company’s actions: “Congressman, respectfully, there are many companies that use a global workforce. We are not the only one.”
The CEO Chew said TikTok started deleting “historical protected U.S. user data stored in non-Oracle servers” in March and “we expect this process to be completed later this year.” 

These events may culminate in a long predicted and much delayed move by US legislators to regulate the social media platform and it is possible the TikTok’s days may be required to withdraw for the US market. 
 

US Congress:     DefenseOne:   Forbes:   Le Monde:   You Tube:   CNBC:   Guardian:     Platformer:  

You Might Also Read: 

TikTok Is Banned From British Government Phones:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« NCSC Launches Services For Small Firms To Be Safe Online
Russia's Disinformation Campaign Targets Ukraine's Supporters »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Armor

Armor

Armor provide managed cloud security solutions for public, private, hybrid or on-premise cloud environments.

Cyfor

Cyfor

Cyfor provides digital forensics and eDiscovery in civil, criminal, intellectual property, litigation and dispute resolution investigations.

PETRAS IoT Hub

PETRAS IoT Hub

PETRAS is a consortium of 12 research institutions and the world’s largest socio-technical research centre focused on the future implementation of the IoT.

Futurex

Futurex

Futurex is a globally recognized provider of enterprise-class data encryption solutions.

SMiD Cloud

SMiD Cloud

SMiD encryption technology has been developed following the highest security practices to allow the data availability, integrity and confidentiality.

Infosec (T) Ltd

Infosec (T) Ltd

Infosec (T) Limited is an independent Tanzania based consultancy specializing in IT governance, information security and IT audit.

AppTec

AppTec

AppTec is a leading software vendor in the field of Unified Endpoint Management and Mobile Security.

GM Security Technologies

GM Security Technologies

GM Security Technologies provides leading managed security services of the highest quality to every type of individual and organization in Puerto Rico, Caribbean and Latin America.

Q6 Cyber

Q6 Cyber

Q6 Cyber is an innovative threat intelligence company collecting targeted and actionable threat intelligence related to cyber attacks, fraud activity, and existing data breaches.

Soffid

Soffid

Soffid provides full Single-Sign-On experience and full Identity and Access Management features by policy-based centralised orchestration of user identities.

Hybrid Identity Protection Conference (HIP)

Hybrid Identity Protection Conference (HIP)

Hybrid Identity Protection (HIP) is the premier educational forum for identity-centric cybersecurity practitioners charged with defending hybrid cloud environments.

Swiss Cyber Institute (SCI)

Swiss Cyber Institute (SCI)

The Swiss Cyber Institute is a registered cyber security education provider by the State Secretariat for Education, Research, and Innovation SERI.

Entara

Entara

Entara (formerly YJT Solutions) is an eXtended Service Provider (XSP) focused on providing cutting edge technology and cyber security solutions to companies in regulated industries.

Vana Solutions

Vana Solutions

Vana Solutions is an Information Technology Services company. We help commercial & federal organizations select, adapt, and integrate the right technology solution so you can move faster.

RAH Infotech

RAH Infotech

RAH Infotech is India’s leading value added distributor and solutions provider in the Network and Security domain. We are specialists in Enterprise and App Security and Application Delivery.

Sandfly Security

Sandfly Security

Sandfly focuses on Linux security that is high performance, high stability, high compatibility, and low risk.