Techcrunch
TikTok users in the U.S. are expressing concern over the app's updated privacy policy, specifically regarding the collection of sensitive data like 'citizenship or immigration status.' However, experts clarify that this disclosure is not new and is primarily for compliance with state privacy laws.
AI 生成摘要
美國 TikTok 用戶對應用程式更新的隱私政策，特別是關於收集「公民身份或移民身份」等敏感數據的條款感到擔憂。然而，專家澄清此披露並非新內容，主要是為了符合州級隱私法規。
Latest
AI
Amazon
Apps
Biotech & Health
Climate
Cloud Computing
Commerce
Crypto
Enterprise
EVs
Fintech
Fundraising
Gadgets
Gaming
Government & Policy
Hardware
Layoffs
Media & Entertainment
Meta
Microsoft
Privacy
Robotics
Security
Social
Space
Startups
TikTok
Transportation
Venture
Staff
Events
Startup Battlefield
StrictlyVC
Newsletters
Podcasts
Videos
Partner Content
TechCrunch Brand Studio
Crunchboard
Contact Us
With the change in TikTok ownership, TikTok users in the U.S. are collectively freaking out over the company’s updated privacy policy after being alerted to the changes through an in-app message. The revised document details the U.S. joint venture’s conditions for using its service, including the specific location information it may collect. Many users are also posting to social media about language found in the policy, which says that TikTok could collect sensitive information about its users, including their “sexual life or sexual orientation, status as transgender or nonbinary, citizenship or immigration status.”
But despite the panic, this disclosure isn’t new — and it doesn’t mean what many users fear. The same language appeared in TikTok’s privacy policy before the ownership deal closed, and it’s primarily there to comply with state privacy laws like California’s Consumer Privacy Act, which requires companies to agree to disclose to consumers what “sensitive information” is collected. Similar disclosures appear in other social media apps’ policies.
To understand why users are concerned — and why the policy reads this way — it helps to look at both the current political climate and the legal requirements TikTok is navigating.
Specifically, the policy states that TikTok could process information from users’ content or what they may share through surveys, including information about their “racial or ethnic origin, national origin, religious beliefs, mental or physical health diagnosis, sexual life or sexual orientation, status as transgender or nonbinary, citizenship or immigration status, or financial information.”
It’s not surprising that Americans would find this type of language troubling, especially given the current political climate.
The escalation of immigration enforcement under the Trump administration has led to widespread protests across the country, which have now come to a head in Minnesota. On Friday, hundreds of businesses closed their doors in an economic blackout to protest the presence of Immigration and Customs Enforcement (ICE) in the state. The move follows weeks of clashes between Minnesota residents and ICE agents, which have led to thousands of arrests and the death of American citizen Renée Good.
But the privacy policy language predates these concerns. In TikTok’s earlier policy, updated on August 19, 2024, the company explained that some of the information it collects and uses may “constitute sensitive personal information” under state privacy laws.
It then proceeded to list those same categories as examples. The legal reason is straightforward.
The policy’s specificity around types of “sensitive information” has to do with state privacy laws, like California’s California Privacy Rights Act (CPRA) and the California Consumer Privacy Act of 2018 (CCPA). The latter, for instance, requires businesses to inform consumers when they collect “sensitive information,” which the law defines as including things like:
Of note, citizenship and immigration status were specifically added to the category of “sensitive personal information” when California Governor Gavin Newsom signed AB-947 into law on October 8, 2023.
Because of the in-app alert timed to the deal’s closure (a requirement because of the new legal entity), many people are now reading through TikTok’s terms for the first time. Seeing this language and fearing the worst, they are posting to social media about their concerns and warning others; some are even threatening to delete their accounts.
But what TikTok’s policy is actually saying is that, as part of operating its app, it may process sensitive information — especially if it’s the subject of someone’s video — and that it’s agreeing to process that sensitive information “in accordance with applicable law.”
The policy even references the CCPA by name, as an example of the applicable laws TikTok is agreeing to.
“TikTok is required under those laws to notify users in the privacy policy that the sensitive personal information is being collected, how it is being used, and with whom it is being shared,” explains Jennifer Daniels, a partner at the law firm Blank Rome, where she provides counsel on regulatory and general corporate law matters.
Her colleague, Philip Yannella, co-chair of Blank Rome’s Privacy, Security, and Data Protection Practice, points out that TikTok likely decided to include this language in its privacy policy because of litigation concerns. For instance, he says that lately, he has seen several demands under the California Invasion of Privacy Act (CIPA) from plaintiffs’ lawyers who alleged “the collection of racial, immigration, and ethnic data.”
A similar type of disclosure to TikTok’s can be found in other social media apps, though some companies keep the explanations more high-level, while others, like TikTok, will list out the precise categories that are legally defined as “sensitive information” for additional clarity.
Still, at least one lawyer consulted by TechCrunch noted that spelling out these specific sensitive details so precisely can actually make things less clear to the end users.
As a point of comparison, Meta’s privacy policy gets fairly granular, too, though it doesn’t specifically include “immigration status” as one of its examples of sensitive information:
Users on social media often share deeply personal topics, explains Ashlee Difuntorum, an associate at Kinsella Holley Iser Kump Steinsapir (KHIKS) and a business litigator with experience representing software and technology companies.
“TikTok is essentially saying that if you disclose something sensitive, that information becomes part of the content the platform technically ‘collects,’” she tells TechCrunch. “Policies like this often look alarming because they’re written for regulators and litigators, not for ordinary consumers. That said, the wording can understandably strike users as intrusive when it’s laid out so bluntly.”
TikTok did not respond to a request for comment.
Of course, sharing content on social media sites isn’t without risk, particularly under authoritarian governments that target their own citizens. These apps collect gobs of data, and governments can enact laws to gain access to it.
Ironically, the decision to move TikTok’s U.S. operations to the U.S. under new ownership was due to this exact concern, but with China then seen as the potential threat.
Chinese laws require companies to assist with state intelligence and data security, including its 2017 National Intelligence Law and its 2021 Data Security Law. The fear among U.S. lawmakers was that TikTok’s ownership by a Chinese entity, ByteDance, could put U.S. citizens at risk, either via surveillance or subtle changes to the app’s algorithm designed to influence people or promote Chinese propaganda.
Now, people in the U.S. are more worried about their own government’s potential surveillance rather than China’s.
Topics
Consumer News Editor
Tickets are live at the lowest rates of the year. Save up to $680 on your pass — and if you’re among the first 500 registrants, score a +1 pass at 50% off.Meet investors. Discover your next portfolio company. Hear from 250+ tech leaders, dive into 200+ sessions, and explore 300+ startups building what’s next. Don’t miss these one-time savings.
Microsoft gave FBI a set of BitLocker encryption keys to unlock suspects’ laptops: Reports
Capital One acquires Brex for a steep discount to its peak valuation, but early believers are laughing all the way to the bank
Anthropic’s CEO stuns Davos with Nvidia criticism
Humans&, a ‘human-centric’ AI startup founded by Anthropic, xAI, Google alums, raised $480M seed round
SpaceX didn’t properly inspect crane before collapse at Starbase, OSHA says
Well, there goes the metaverse!
Why Silicon Valley is really talking about fleeing California (it’s not the 5%)
© 2025 TechCrunch Media LLC.