TikTok has agreed to pay USD 92 million to settle dozens of lawsuits alleging that the popular video-sharing app harvested personal data from users, including information using facial recognition technology, without consent and shared the data with third-parties, some of which were based in China.
The proposed settlement, which lawyers in the case have called among the largest privacy-related payout in history, applies to 89 million TikTok users in the U.S. whose personal data was allegedly tracked and sold to advertisers in violation of state and federal law.
“First, it provides compensation for TikTok users, but equally as important, it ensures TikTok will respect its users’ privacy going forward,” Katrina Carroll, one of the lawyers for TikTok users, said. “Social media seems so innocuous, but troubling data collection, storage, and disclosure can happen behind the scenes.”
The settlement is the result of 21 federal lawsuits filed mostly on behalf of minors — some as young as 6 years old — that claimed the company engaged in the “theft of private and personally identifiable TikTok user data.”
A TikTok spokesperson said while the company disagrees with the assertions in the lawsuit, the company decided settling the case was in its best interest.
“Rather than go through lengthy litigation, we’d like to focus our efforts on building a safe and joyful experience for the TikTok community,” the spokesperson said.
The legal battle has raged for more than a year. The suits were merged into one multi-district action in the Northern District of Illinois that cited violations of privacy laws in Illinois and California. The laws require technology companies to receive written consent before collecting data about a person’s identity. The suit also claimed TikTok broke federal laws, including privacy and computer fraud and abuse statutes.
According to lawyers representing TikTok users, the app “clandestinely vacuumed up” vast quantities of private and personally identifiable data that could be used to identify and spy on users without permission. Even information from draft videos that were never shared publicly on the app were mined by TikTok for data, the lawyers for the users alleged.
As millions in the U.S. turned to the app for videos of dance challenges, cooking tips and silly skits, TikTok was allegedly sending their information to servers in China, or in other countries where China-based employees could access the data.
TikTok also shared information about users, without their consent, with Facebook, Google and other companies, the suit claims. “The TikTok app’s light-hearted fun comes at a heavy cost,” plaintiffs’ lawyers wrote in the lawsuit.
Investigators hired by the plaintiffs’ lawyers found that TikTok went to great lengths to hide the data collection and sharing practices. “Plaintiffs’ investigation has revealed that [TikTok did so] by obfuscating the source code that would reveal their misconduct,” according to the suit.
The tentative settlement awaits final approval by U.S. District Judge John Lee of the Northern District of Illinois. Under the proposed terms of the settlement, TikTok will no longer record a user’s biometric information, including facial characteristics, nor track a user’s location using GPS data. TikTok also committed to stop sending U.S. users data overseas and the app said it would no longer collect data on draft videos before the content is published.