TikTok is still storing Americans’ data on overseas servers, potentially placing it at risk of being accessed and exploited by China’s communist regime.
TikTok CEO Shou Zi Chew testified on the matter during a March 23 hearing of the House Energy and Commerce Committee on the subject of TikTok’s data privacy practices and ties to China.
“Today, there is still some data that we need to delete [from overseas servers],” Chew said.
“I believe we will be able to get it done this year.”
The issue of TikTok’s data practices largely stems from concern about its links to the Chinese Communist Party (CCP) through parent company ByteDance, a Beijing-based tech giant.
ByteDance is subject to CCP laws that require all data controlled by Chinese companies to be surrendered to the regime upon request. ByteDance also maintains a CCP committee as part of its corporate structure, which is also required by Chinese law.
Committee Chair Cathy McMorris Rodgers (R-Wash.) said that TikTok’s ties to the CCP through ByteDance were an unacceptable national security risk, and that TikTok could be used to conduct influence operations or espionage for the regime.
“CCP laws require Chinese companies like ByteDance to spy on their behalf,” Rodgers said. “That means any Chinese company must grant the CCP access and manipulation capabilities as a design feature.”
TikTok Claims New Project will Secure US Data
For its part, TikTok has proposed to undertake an initiative called “Project Texas,” in which it will store all of its U.S. user data on Oracle-based cloud infrastructure in the United States.Chew described the effort as “American data stored on American soil by an American company and overseen by American personnel.”
“The company plans to begin the process of deleting non-public historical U.S. user data this month and anticipates that the process will be completed this year,” Chew said.
Chew confirmed that employees of Douyin, the heavily-censored sister app of TikTok available in China, can currently access U.S. user data and would continue to be able to do so until Project Texas is completed.
He also acknowledged that even should Project Texas succeed, “legacy U.S. data” in Singapore would not be deleted until much later.
“To be clear, until that user data transfer happens, user data remains accessible to the Chinese Communist Party,” said Rep. John Joyce (R-Ohio).
Joyce’s comments highlighted the crux of much national security concern about TikTok in Washington, where there is increasing concern that TikTok parent company ByteDance is effectively an extension of the CCP.
Experts say there is mounting evidence to support that claim.
To that end, Chew, who previously served as the Chief Financial Officer for ByteDance, acknowledged that he was in regular communication with ByteDance CEO Liang Rubo, to whom he still reports directly.
