Any category of consumer health data may be shared in the listed ways
The sharing section opens by saying that, subject to applicable laws, TikTok may share personal information, which may include each of the categories of consumer health data described earlier in the policy, as reasonably necessary to provide you the Services in the ways listed after it. The earlier categories include health-condition information, biometric identifiers such as faceprints and voiceprints, location that could show a search for healthcare, and other information used to infer health data. For more on sharing, the policy points to “How We Share Your Information” in the main Privacy Policy.
Supporting quotations
Subject to applicable laws, we may share personal information, which may include each of the categories of consumer health data as described above, as reasonably necessary to provide you the Services in the following manner:
Information about your physical and mental health conditions that you or others choose to provide in the content that you create or upload through the Services.
We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints from your user content.
For additional details about how we share information, please review “How We Share Your Information” in the TikTok Privacy Policy.
Qualifications & exceptions
Phrased as “may share” and “may include”, not as a promise to share or not to share.
Subject to applicable laws.
Framed as sharing “as reasonably necessary to provide you the Services”, though later list items refer to sale or merger, legal reasons and anything otherwise permitted by law.
Not stated here
The text does not say which categories are shared with which recipients.
The main Privacy Policy’s “How We Share Your Information” section is not part of the supplied text.
Cross-references
contrast (model-proposed): May also be shared “as otherwise permitted by law” — contrast: The lead-in frames listed sharing as reasonably necessary to provide you the Services, while the final item allows sharing as otherwise permitted by law without that limit. The text does not say how the two fit together.
Sharing & Disclosure · Permission or license
Shared with service providers and business partners for business operations
TikTok says it may share this information with service providers and business partners to help it perform business operations and for business purposes. As an example, they may receive certain information to help provide services such as content moderation.
Supporting quotations
With service providers and business partners to help us perform business operations and for business purposes. For instance, service providers and business partners may receive certain information to help us provide services, like content moderation.
Qualifications & exceptions
Phrased as “may share”.
Covered by the lead-in: subject to applicable laws and as reasonably necessary to provide the Services.
Not stated here
The text does not name the providers or partners or say which information each receives. Content moderation is only an example.
Sharing & Disclosure · Permission or license
Shared with affiliates for the purposes of this policy
TikTok says it may share this information with affiliates that it controls or that are under common control with it, as necessary for the purposes set out in this policy.
Supporting quotations
With our affiliates controlled by, or under common control with, us as necessary for the purposes set forth within this Consumer Health Data Privacy Policy.
Qualifications & exceptions
Limited to affiliates controlled by, or under common control with, TikTok.
Limited to what is “necessary for the purposes set forth” in this policy.
Not stated here
The affiliates are not named and their locations are not stated.
Sharing & Disclosure · Permission or license
May be shared in a sale, merger or other business transfer
TikTok says it may share this information in connection with a sale, merger or other business transfer.
Supporting quotations
In connection with a sale, merger, or other business transfer.
Qualifications & exceptions
Phrased as “may share”.
Not stated here
The text does not say what notice or choice you would have, or whether the receiving party must follow this policy.
Sharing & Disclosure · Permission or license
May be shared for legal reasons
TikTok says it may share this information “for legal reasons”. The text gives no further detail on what counts.
Supporting quotations
For legal reasons.
Qualifications & exceptions
Phrased as “may share”.
Not stated here
The text does not say who may ask, what legal process is needed, or whether you are told.
Sharing & Disclosure · Permission or license
Shared with your consent or at your direction, including third-party access and purchases
TikTok says it may share information with your consent or at your direction. Two examples are given. If you allow a third-party service to access your account, TikTok may share certain information about you with it, depending on your permissions. When you buy from a third party on the Services, including a merchant selling through shopping features, TikTok may share transaction-related information with that third party and with its payment processors and transaction fulfillment providers.
Supporting quotations
With your consent or at your direction. For example, if you choose to allow a third-party service to access your account, we may share certain information about you with the third party depending on your permissions.
In addition, when you make a purchase from a third party on the Services, including from a merchant selling products through our shopping features, we may share the information related to the transaction with that third party and their payment processors and transaction fulfillment providers.
Qualifications & exceptions
Phrased as “may share”.
Account access sharing depends on the permissions you give.
The purchase example concerns information related to the transaction.
Not stated here
The text does not say whether health-related information is part of what is shared in these examples.
Sharing & Disclosure · Permission or license
May also be shared “as otherwise permitted by law”
The last item in the list says TikTok may share this information as otherwise permitted by law. It is open-ended: it does not name recipients or purposes, and it follows a list that begins with sharing “as reasonably necessary to provide you the Services”.
Supporting quotations
As otherwise permitted by law.
Qualifications & exceptions
Phrased as “may share”.
Open-ended catch-all tied to what the law permits.
Not stated here
The text does not say which recipients or purposes this covers.
Legal Rights & Agreement Rules · User right or choice
You can ask to know, access, correct or delete, and appeal a decision
The policy says you may submit a request to know, access, correct or delete the information TikTok has collected about you through a privacy request page on tiktok.com. You may also submit a request to appeal any decision TikTok made about your request, using the same method. For more on how to exercise your rights, it points to “Your Rights and Choices” in the main Privacy Policy.
Supporting quotations
You may submit a request to know, access, correct, or delete the information we have collected about you at https://www.tiktok.com/legal/report/privacy. You may also submit a request to appeal any decision we have made about your request through this same method.
For additional details on how to exercise your rights, please review “Your Rights and Choices” in the TikTok Privacy Policy.
Qualifications & exceptions
Requests are made through the stated web page; the same method is used for appeals.
The right covers “the information we have collected about you”, not only consumer health data.
Not stated here
The text does not give response times, verification steps or limits on these rights.
The main Privacy Policy’s “Your Rights and Choices” section is not part of the supplied text.
Legal Rights & Agreement Rules · Company practice
TikTok may change this policy and may give notice by updating the date or posting the new version
TikTok says it may amend or update this policy from time to time. It may notify you of changes by updating the “Last Updated / Effective Date” at the top, by posting the new policy, or by other notice required or permitted by applicable law. It recommends that you review the policy from time to time.
Supporting quotations
We may amend or update this Consumer Health Data Privacy Policy from time to time. When we update this Consumer Health Data Privacy Policy, we may notify you of changes by updating the “Last Updated / Effective Date” date at the top of the new Privacy Policy, posting the new Privacy Policy, or by providing other notice required or permitted by applicable law.
Qualifications & exceptions
Phrased as “may notify”; notice can be only an updated date or a posted copy.
The duty to review is a recommendation.
Not stated here
The text does not say how far ahead changes take effect or whether you are individually told.
Legal Rights & Agreement Rules · Context
Supplements the TikTok Privacy Policy for health-related data
This policy is an add-on to the main TikTok Privacy Policy and covers the same Services as defined there. It says the Services are operated by TikTok USDS Joint Venture LLC, and that where information TikTok processes may count as “consumer health data” under Washington’s My Health My Data Act and similar US state laws, this policy explains how that information is collected, used and shared. It states an effective date of January 22, 2026. Words it does not define take the meaning given in the main Privacy Policy.
Supporting quotations
Last Updated / Effective Date: January 22, 2026
This TikTok Consumer Health Data Privacy Policy supplements the TikTok Privacy Policy and applies to the Services, as defined therein. The Services are operated by TikTok USDS Joint Venture LLC (“we” or “us”).
In the event there are circumstances where some of the information we process may be considered “consumer health data” under Washington’s My Health My Data Act and other similar US state laws, this Consumer Health Data Privacy Policy explains how we collect, use, and share such information.
Capitalized terms that are not defined in this Consumer Health Data Privacy Policy have the meaning given to them in the TikTok Privacy Policy.
Qualifications & exceptions
Applies only where some information TikTok processes “may be considered” consumer health data under the cited US state laws.
Capitalized terms not defined here have the meaning in the main TikTok Privacy Policy.
Not stated here
The main TikTok Privacy Policy is not part of the supplied text, so the definition of “Services” and other defined terms cannot be checked here.
The text does not list which US state laws besides Washington’s act count as “similar”.
Data Access & Collection · Company practice
TikTok may collect information from several sources, depending on settings and use
TikTok says it may collect information from and about you, including information you provide, information collected automatically and information from other sources. The policy then lists kinds of information it may collect that relate to health, and says what it may collect depends on your settings and how you use the Services. It notes that the scope of “consumer health data” differs between laws and may be broader in some places than others, and that the list is given for your information and awareness.
Supporting quotations
We may collect information from and about you, including information that you provide, automatically collected information, and information from other sources.
The scope of consumer health data is defined differently under different laws, and the scope may be broader in some jurisdictions than others. For your information and awareness, we may collect the following information depending on your settings and how you use the Services:
Qualifications & exceptions
Phrased as “may collect”, not as a promise to collect or not to collect.
What is collected depends on “your settings and how you use the Services”.
Not stated here
The text does not say which “other sources” information comes from or which settings change what is collected.
Sharing & Disclosure · Restriction or exception
Information you make public may be seen and used by others and may not be legally protected
If you take part in public activities on the Services, the policy warns that anything you share may be read, collected or used by other users and the public. It also says laws may not protect consumer health data you choose to make public, and tells you to be careful about disclosing personal information.
Supporting quotations
If you choose to engage in public activities on the Services, you should be aware that any information you share may be read, collected, or used by other users and the public. Laws may not protect consumer health data you choose to make public, and you should use caution in disclosing personal information while using the Services.
Qualifications & exceptions
Applies to information you share in public activities on the Services.
The protection statement is hedged: laws “may not” protect it.
Not stated here
The text does not say which activities count as public.
Data Access & Collection · Company practice
Health conditions may be collected from content that you or others provide
TikTok says it may collect information about physical and mental health conditions that you or others choose to provide in content you create or upload. Its examples are messages you compose, send or receive through messaging, non-public content about a recent illness, searches for information about an illness or condition, and answers in surveys, research, promotions, contests, campaigns, challenges, competitions or events that TikTok runs or sponsors where you disclose health-related conditions or preferences.
Supporting quotations
Information about your physical and mental health conditions that you or others choose to provide in the content that you create or upload through the Services.
For example, you or others may provide such information if you compose, send, or receive messages through the Services’ messaging functionalities, create or post non-public user content discussing a recent illness, or search for information about an illness or condition through the Services’ search function.
You may also choose to provide such information if, for example, you participate in surveys, research, promotion, contests, marketing campaigns, challenges, competitions or events conducted or sponsored by us, in which you disclose information related to any health-related conditions or preferences.
Qualifications & exceptions
Framed as information that you “or others choose to provide”.
The examples are introduced with “for example” and are not a closed list.
The collection list is subject to “depending on your settings and how you use the Services”.
Not stated here
The text does not say how messages or search queries are accessed, or what happens to this information after collection beyond the other sections.
Inference & Profiling · Company practice
TikTok may identify what appears in your videos, images and audio
The policy says TikTok may collect information about the videos, images and audio recordings that are part of your user content. It gives three kinds: identifying objects and scenery, the existence and location of a face and other body parts, and the text of the words spoken in your content.
Supporting quotations
Information about the videos, images and audio recordings that are a part of your user content, such as by identifying objects and scenery; the existence and location of a face and other body parts; and the text of the words spoken in your user content.
Qualifications & exceptions
Phrased as what TikTok “may collect” from user content.
Subject to “depending on your settings and how you use the Services”.
Not stated here
The text does not say whether this applies to all content or only some, or how long the results are kept.
Data Access & Collection · Company practice
Faceprints and voiceprints may be collected, with permission sought only where law requires
TikTok says it may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your user content. It says that where required by law it will seek any required permissions from you before collecting them, and it links to a separate page with more on how face and voice information is processed.
Supporting quotations
We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints from your user content. Where required by law, we will seek any required permissions from you prior to any such collection.
Qualifications & exceptions
Permission is promised only “where required by law” and only for “any required permissions”.
Biometric terms are those “as defined under US laws”.
Not stated here
Whether permission is required in a given state is not stated here.
The linked page about face and voice information is not part of the supplied text.
Data Access & Collection · Company practice
Location data that could show a search for healthcare may be collected
The policy says TikTok may collect approximate or precise location information that could identify your attempt to seek healthcare services or supplies. Its example is that you may choose to add points of interest such as healthcare centers to your user content.
Supporting quotations
Location information, including approximate or precise location information, that could identify your attempt to seek healthcare services or supplies. For instance, you may choose to add certain points of interest like healthcare centers to your user content.
Qualifications & exceptions
Covers both approximate and precise location.
The example involves a choice to add a point of interest to your content.
Not stated here
The text does not say whether location is also collected from device settings or other sources for this purpose.
Inference & Profiling · Company practice
Other information that could be used to infer health data may also be collected
The last item in the list is “other information that may be used to infer or derive consumer health data”. The text gives no examples, so the item can cover information that is not itself about health but from which health data could be inferred or derived.
Supporting quotations
Other information that may be used to infer or derive consumer health data.
Qualifications & exceptions
Open-ended catch-all item.
Phrased as information that “may be used” to infer or derive health data, and the list is introduced with “we may collect”.
Not stated here
The text does not say what kinds of information this covers or whether TikTok itself draws such inferences.
Data Access & Collection · Context
Fuller list of collected data is in the main Privacy Policy
For more on the types of data TikTok collects and how it collects it, this policy points to the “Information We Collect” section of the main TikTok Privacy Policy.
Supporting quotations
For additional details about the types of data we collect and how we collect it, please review “Information We Collect” in the TikTok Privacy Policy.
Qualifications & exceptions
The pointer is to a named section of a different document.
Not stated here
The main TikTok Privacy Policy is not part of the supplied text, so what that section says is unknown here.
Use & Processing · Permission or license
Consumer health data may be used to run the Services, or with consent or as law allows
TikTok says it may use consumer health data to operate the Services, including to improve, support and administer them and to fulfill and enforce its Terms of Service. It may also use the data otherwise with your consent or in accordance with applicable law. For more detail on use it points to “How We Use Your Information” in the main Privacy Policy.
Supporting quotations
We may use consumer health data to operate the Services, including to improve, support and administer the Services, and fulfill and enforce our Terms of Service. We may also use your consumer health data otherwise with your consent or in accordance with applicable law.
For additional details about how we use information, please review “How We Use Your Information” in the TikTok Privacy Policy.
Qualifications & exceptions
Phrased as “may use”.
The stated purposes are operating, improving, supporting and administering the Services and fulfilling and enforcing the Terms of Service; further use needs consent or must be “in accordance with applicable law”.
Not stated here
The text does not list uses beyond these, or say what applicable law would allow.
The main Privacy Policy’s “How We Use Your Information” section is not part of the supplied text.