Parliamentary Committee Notes: Security Concerns with TikTok Social Media Application

Date: January 30, 2022
Classification: unclassified
Fully releasable (ATIP)? Yes (except name)
Branch / Agency: NCSB/NCSD

Proposed Response:

Background:

TikTok is a Chinese video-sharing social networking service owned by ByteDance, a Beijing-based Internet technology company founded in 2012. It is used to create short music, lip-sync, dance, comedy and talent videos of 3 to 15 seconds, and short looping videos of 3 to 60 seconds. TikTok was launched in 2017 for iOS and Android in most markets outside of mainland China; however, it only became available worldwide, including the United States, after merging with Musical.ly on August 2, 2018.

Very popular with younger users, the app has been downloaded over a billion times and is available in over 140 markets and 75 languages, including in Canada. The Social Media Lab at Toronto Metropolitan University reported in September 2022 that 26% of online Canadians have a TikTok account, with adoption skewing towards younger age groups, as 76% of those aged 18-24 have an account on the platform. TikTok had the largest increase in the number of Canadian users relative to the Social Media Lab’s data from 2020 (11% increase). 

The app uses artificial intelligence to analyze users' interests and preferences through their interactions with the content, and display a personalized content feed for each user. Similar to other consumer algorithms such as those used by YouTube and Netflix, which provide users with a list of recommended videos, TikTok interprets the user's individual preferences and provides content that they may enjoy.

CSIS’ 2021 Public Report noted that advanced cyber tools developed and sold by commercial firms are giving new collection capabilities to countries and foreign state actors that historically have not posed a significant threat in the cyber domain. The services offered by these companies can have both defensive and offensive applications. These tools enable a growing list of actors to conduct espionage, sabotage, endanger civilians, undermine democratic values and exert foreign influence. Open-source reporting suggests that multiple authoritarian regimes have used such tools to target lawyers, journalists, politicians, and human rights defenders.
Over the past few years, many media outlets have reported on data privacy and security concerns related to the application. In January 2023, Sami Khoury, head of CSE’s Cyber Centre, spoke to CBC News about the potential risks Canadians face when downloading TikTok and other applications. In December 2022, U.S. FBI Director Christopher Wray raised national security concerns with TikTok, saying that the FBI was concerned that the Chinese had the ability to control the app's recommendation algorithm, "which allows them to manipulate content, and if they want to, to use it for influence operations." He also asserted that China could use the app to collect data on its users that could be used for traditional espionage operations.

On December 28, 2022, President Biden signed into law an omnibus spending bill that includes a ban, for national security reasons, on the use of TikTok applying to all federal government devices. This move follows bans already put in place by the U.S. military and several state governments. In addition, bi-partisan legislation to ban TikTok from operating in the United States altogether was introduced in the U.S. Senate and House of Representatives in December 2022.

Prohibiting TikTok in any way, including on government devices, remains a decision point in Canada.

Contacts:

Prepared by: NCSB/NCSD (name and number not releasable)
Approved by: Sébastien Aubertin-Guigère, Acting Senior Assistant Deputy Minister, National and Cyber Security Branch, 613-614-4715

Date modified: