TikTok Announces New Data Security Regime to Protect User Information in Europe
Pressure Mounts in the US to Ban the Social Video App Over Links to China
TikTok, the popular social video app, has announced a new data security plan, called Project Clover, aimed at protecting user information across Europe. This move comes amidst growing political pressure in the United States to ban the app over its links to China through its parent company, ByteDance.
Project Clover involves the storage of user data on servers located in Ireland and Norway, at an estimated annual cost of €1.2 billion (£1.1 billion). Additionally, any transfers of data outside of Europe will be vetted by a third-party IT company to ensure the protection of user information.
TikTok has been facing mounting scrutiny over its links to China, with concerns raised over the potential access and manipulation of user data and algorithms by the Chinese government. The company has repeatedly denied such claims and insists that it would refuse to provide any data to the Chinese government if asked to do so.
According to Theo Bertram, TikTok’s Vice President of Government Relations and Public Policy in Europe, the Chinese government has never requested data from the company. He further emphasized that TikTok would reject any such request if it were made. With over 1 billion users globally, including 150 million in Europe, TikTok is a significant player in the social media landscape.
Clover’s Additional Security Measures
TikTok’s Project Clover will involve the oversight of a third-party European cybersecurity firm to monitor the company’s data controls and data transfer beyond the European region. The identity of the security partner has not been disclosed by the company yet. Furthermore, TikTok will introduce the practice of “pseudonymisation” to protect personal data, which implies that an individual’s identity cannot be established without supplementary information.
TikTok’s European proposals are similar to its Project Texas plan, which is aimed at reassuring the United States about user data. Under Project Texas, TikTok will store data from American users within the United States on servers operated by Oracle. Additionally, Oracle will oversee TikTok’s algorithms and source code to mitigate concerns about possible Chinese government interference in app content, as well as reviewing updates and distributing them to the Google and Apple app stores.
However, the proposals under Project Texas have not received political sign-off from the White House, amidst ongoing tensions between the US and China. TikTok’s credibility was also damaged last year when ByteDance admitted that employees had attempted to use the app to spy on reporters.
Growing Concerns Over Data Security
Concerns over TikTok’s data security have been heightened by fears that companies could be legally compelled to hand over data by the Chinese government, citing examples such as China’s National Intelligence Law of 2017, which mandates that all organizations and citizens must “support, assist, and cooperate” with national intelligence efforts.
TikTok was recently banned by the European Commission from being used on work phones and devices, and the app was also prohibited on staff phones by the European Parliament. However, the United Kingdom has declined to take comparable actions, despite lobbying from Conservative politicians, including the previous Tory leader Iain Duncan Smith. Michelle Donelan, the Secretary of State for Science, Innovation, and Technology, stated that there is no evidence to indicate the need for prohibiting the use of TikTok, and such a move would require a significant evidential basis. Therefore, it would be a very strong decision to take.
TikTok’s Project Clover represents a significant effort by the company to address concerns regarding data security and privacy, particularly in Europe, where it has faced heightened scrutiny from regulators and politicians. By opting to store user data on servers in Ireland and Norway and carefully reviewing any transfers outside of Europe, TikTok is taking important measures to reassure users and governments of its commitment to safeguarding their data.
Nonetheless, the company still confronts obstacles, particularly in the US, where political pressure to ban the app remains intense. It remains uncertain whether TikTok’s actions will suffice to appease regulators and policymakers, but it is apparent that data security and privacy will continue to be a critical challenge for tech firms in the future.
