These Guidelines tell law enforcement how to request data of U.S.-based users
The Guidelines, last updated 6 October 2026, are a reference for law enforcement officials who want the data of U.S.-based users of the TikTok platform, which TikTok USDS Joint Venture LLC operates in the United States (the document calls it "TikTok U.S."). TikTok U.S. says it is committed to cooperating with law enforcement while respecting its users' privacy, freedom of expression and other rights, and that, besides these Guidelines, it has internal policies and procedures for handling and responding to law enforcement requests. It says those procedures are informed by legal and human rights standards and are meant to limit adverse human rights impacts while still letting it comply with legitimate, valid legal requests to disclose user data, including from regulatory authorities where relevant. It rejects requests that go against its policies and procedures.
Supporting quotations
Last updated: 6 October 2026
These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of U.S.-based users of the TikTok platform (the “Platform”), which is operated by TikTok USDS Joint Venture LLC in the United States (“TikTok U.S.”).
TikTok U.S. has internal policies and procedures governing how TikTok U.S. handles and responds to law enforcement requests.
while enabling TikTok U.S. to comply with legitimate, valid legal requests from law enforcement (including regulatory authorities, where relevant) to disclose user data
If your request relates to TikTok U.S. Shop data, please refer to the
We reject requests which go against our policies and procedures.
Qualifications & exceptions
The Guidelines address requests for data of U.S.-based users; requests about users outside the United States are sent to a separate global version.
Requests that relate to TikTok U.S. Shop data are sent to a separate TikTok Shop guideline instead of these Guidelines.
Not stated here
The internal policies and procedures are not set out in this document, so what they add to the Guidelines and how they are applied is not stated.
The linked TikTok Shop guideline, the global Guidelines and the human rights statement are not part of this source, so their content is not covered.
Legal Rights & Agreement Rules · Procedure
Requests must go to the TikTok entity for the user's location
Requests must be addressed to the correct TikTok entity, and that depends on where the user is located. For users located in the United States, the addressee is TikTok USDS Joint Venture LLC at the Culver City, California address given in the Guidelines. For users located outside the United States, officials are sent to the global version of the TikTok Law Enforcement Guidelines. An official who is unsure where the user is located is told to enter the username or another identifier into the TikTok Safety Enforcement Tool to confirm the region or country. A request addressed to the wrong TikTok entity may not be processed until that is fixed, which can cause delay.
Supporting quotations
requests must be addressed to the correct TikTok entity
This is based on the location of the relevant user.
Requests for data of users located in the United States:
TikTok USDS Joint Venture LLC 5800 Bristol Parkway, Suite 300 Culver City, CA 90230 UNITED STATES
For requests for data of users located outside the United States, please refer to the global version of the
If you are unsure of where the user is located, please insert the username (or other identifier) on the
requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay
Qualifications & exceptions
The entity is chosen by the user's location, not by where the requesting authority is.
A wrong-entity request "may not be processed until this has been rectified"; the FAQ later lists requests not addressed to the correct entity among common reasons a request may be rejected.
Not stated here
The asterisk after "entity" in the source has no footnote text anywhere in this document.
The global Guidelines and the Safety Enforcement Tool are linked but not supplied, so what they say or require is not covered.
Legal Rights & Agreement Rules · Procedure
Requests go through TikTok's webform, in PDF and English, not informal channels
Requests must be submitted through TikTok's law enforcement webform, with any attachments (for example an official warrant, court order or other supporting documents) in PDF format; Word-format attachments will not be accepted. All requests and supporting documents, including orders, warrants and subpoenas or equivalent, must be in English or come with a translation. TikTok U.S. says it will not respond to requests for user data sent by people who are not law enforcement officials, or sent through informal channels such as personal email addresses.
Supporting quotations
requests must be submitted to our webform:
with any attachments (for example, official warrant, court order, or other documentation supporting the request) in PDF format (word format will not be accepted).
All requests to TikTok U.S. and any supporting documents (including orders, warrants, and/or subpoenas or equivalent) must be provided in English or with a translation.
TikTok U.S. will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).
Qualifications & exceptions
Word-format attachments are not accepted; PDF is the stated format.
Non-English requests and documents need a translation.
Not stated here
The webform itself is linked but not supplied, so any fields or limits it imposes are not covered.
Legal Rights & Agreement Rules · Restriction or exception
Confirming receipt does not waive TikTok U.S.'s objections
If TikTok U.S. confirms it received a message, it says that is for convenience only. Sending that confirmation does not give up any right to object, and the document names lack of jurisdiction, invalid legal process and improper service as examples of objections it keeps.
Supporting quotations
Any confirmation of receipt of correspondence is for convenience only and, in doing so, TikTok U.S. does not waive any right of objection (including for lack of jurisdiction, invalid legal process or lack of proper service).
Qualifications & exceptions
The list of objections is given as examples ("including"), not as a complete list.
Not stated here
The document does not say that a confirmation of receipt means a request has been accepted or will be answered.
Legal Rights & Agreement Rules · Restriction or exception
Requests must name the data type and legal basis; content data generally needs a court order
Each request must clearly say which type of data is wanted and the legal basis for asking. If a request does not meet the legal requirements that apply to that data, as listed in Section 3, the data will not be disclosed. The document says this is particularly true for content data, for which it says the requirements generally call for a domestic court or judicial order, warrant or equivalent. Section 3 adds that the scope of data requested should be clearly specified and that overly broad requests will be refused, and that the request should cite the legal process that authorizes law enforcement to request and collect information to prevent, detect or investigate criminal offences.
Supporting quotations
Each request must clearly specify the type of data requested and the legal basis for requesting it.
If the request does not meet the applicable legal requirements for the requested data (as listed in Section 3 below), the data will not be disclosed.
This is in particular the case for requests relating to content data (which generally require a domestic court / judicial order, warrant or equivalent).
Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Qualifications & exceptions
For content data the requirement is described as one that "generally" applies, and a "domestic" court or judicial order.
Section 3 words some items as "should" while introducing the whole list as things every request "must" include.
Not stated here
The document does not set out which specific legal process is needed for each data category other than content data.
Whether any exception to the content data requirement applies is not stated in this section; emergency disclosure is covered separately.
Legal Rights & Agreement Rules · Procedure
Requests must be signed PDFs on letterhead and name the TikTok application
To ensure timely processing, every law enforcement request must be sent in a non-editable electronic format (such as PDF), on official law enforcement agency letterhead, signed and dated. The legal process itself (a preservation request, subpoena, court order or warrant) must explicitly name the TikTok application in the body of the document. Generic requests, or legal process that names unrelated third-party services, will not be accepted.
Supporting quotations
all law enforcement requests must be submitted in a non-editable electronic format (such as PDF), written on official law enforcement agency letterhead, signed, and dated.
The legal process (preservation request, subpoena, court order, or warrant) must explicitly name the TikTok application within the body of the document itself.
Generic requests or process naming unrelated third-party services will not be accepted.
Qualifications & exceptions
The format rule is stated as a requirement for timely processing; the application-naming rule says non-conforming process "will not be accepted".
Not stated here
The document does not say what happens to a request that is not signed, dated or on letterhead beyond the timely-processing purpose.
Legal Rights & Agreement Rules · Procedure
Requests must identify the requesting authority and officer
Every request must include details of the requesting law enforcement authority (or court) and of the requesting officer. For the authority, that means its name and location; for a court order, the request should give the location and name of the court and the judge or magistrate. For the officer, it means name, badge or identification number, email address (which must be from an official email domain) and phone number, including any direct-dial extension.
Supporting quotations
Every request must additionally include all of the following information:
Details of requesting law enforcement authority (or Court):
Requesting Authority (or Court): The name and location of the relevant authority. In the case of a Court order, the request should indicate the location and name of the relevant Court and judge / magistrate.
Requesting officer: The requesting officer’s name, badge / identification number, email address (this must be from an official email domain) and phone number (including any direct dial extension).
Qualifications & exceptions
The list is introduced with "must", but the court and judge details are worded as "should"; the email domain wording is "must be from an official email domain".
Not stated here
The document does not say how the official email domain is checked.
Legal Rights & Agreement Rules · Procedure
Requests must identify the user account with an approved identifier
When asking for data about a specific user, the request must give a specific TikTok username or another approved account identifier tied to that account. TikTok U.S. also asks for a screenshot of the account to help it find the right one faster. The approved identifiers are: TikTok User ID; TikTok username (an account URL or screenshot is accepted); phone number; email address; and video ID (a video URL or screenshot is accepted).
Supporting quotations
Details of relevant user account:
When requesting data regarding a specific user of the Platform, you must provide a specific TikTok username or an approved account identifier associated with the relevant account.
We also request that a screenshot of the relevant account be provided (to help us to identify the correct account more quickly).
TikTok User ID
TikTok username (account URL or screenshot accepted)
Phone number
Email address
Video ID (video URL or screenshot accepted)
Qualifications & exceptions
The screenshot is requested, not required, and the aim is to find the correct account more quickly.
The identifier must be one TikTok lists as approved.
Not stated here
The document does not say what happens if only an unapproved identifier is provided.
Legal Rights & Agreement Rules · Procedure
Requests must be narrowly scoped and give a date range
The request should clearly state the scope of the data wanted, and overly broad requests will be refused. It must also give a date (and a time if possible) or a date range, as relevant to the request; that date requirement is stated for historic data only.
Supporting quotations
Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.
Date range: The request must specify a date (and, if possible, a time), or a date range as relevant to the request (for historic data only).
Qualifications & exceptions
The date or date range requirement is described "as relevant to the request" and "for historic data only".
Not stated here
The document does not define how broad is "overly broad" beyond the examples in the FAQ.
Legal Rights & Agreement Rules · Procedure
Requests should cite the legal process and the offence under investigation
The request should cite the legal process, by the relevant article or section of an Act, statute or code, that authorizes law enforcement to request and collect information to prevent, detect or investigate criminal offences. It should separately state the type of offence under investigation (again citing the relevant article or section), the circumstances of the offence and how it connects to the platform.
Supporting quotations
Legal basis for the request:
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Context and Offence(s) under investigation: The request should separately indicate the type of offence(s) under investigation (citing the relevant article or section of Act / Statute / Code), the circumstances of the offence and in what way it is connected to the Platform.
Qualifications & exceptions
These items are worded as "should" although the list is introduced as things every request "must" include.
Not stated here
The Acts, statutes and codes a request might cite are not named in this document.
Legal Rights & Agreement Rules · Procedure
Disclosing preserved data still requires meeting Sections 1 and 3
Preservation alone does not hand data over. To ask for disclosure of the preserved data, the requirements in Sections 1 and 3 of the Guidelines apply: the request must go to the right TikTok entity for the user's location, through the webform with PDF attachments, in English or translated, from law enforcement officials and not through informal channels, and must carry the Section 3 information.
Supporting quotations
To seek disclosure of preserved data, the requirements set out in Sections 1 and 3 of these Guidelines will apply.
requests must be addressed to the correct TikTok entity
Requests for data of users located in the United States:
TikTok USDS Joint Venture LLC 5800 Bristol Parkway, Suite 300 Culver City, CA 90230 UNITED STATES
requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay
requests must be submitted to our webform:
TikTok U.S. will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).
Qualifications & exceptions
Section 1 covers where and how a request is submitted; Section 3 covers what it must contain.
Not stated here
The document does not say whether a preservation request that already met Sections 1 and 3 must be resubmitted when disclosure is sought.
Legal Rights & Agreement Rules · Procedure
Emergency requests: webform, sworn law enforcement official, official email domain
To make an emergency request, the official must use TikTok's webform. Emergency requests must be made by a sworn law enforcement official and, if sent by email, must come from an official law enforcement email domain. People who are not law enforcement and know of an emergency are told to contact local law enforcement officials immediately and directly.
Supporting quotations
To request this data, you must submit your request through our web form:
All emergency requests must be made by a sworn law enforcement official, and come from an official law enforcement email domain (if sent via email).
Non-law enforcement personnel aware of an emergency situation should immediately and directly contact local law enforcement officials.
Qualifications & exceptions
The email-domain condition is written "if sent via email"; the same paragraph says to use the web form, and the document does not explain when email is used.
Not stated here
The document does not say how "sworn" status or the email domain is verified.
Legal Rights & Agreement Rules · Procedure
Cross-border requests may need a Mutual Legal Assistance Treaty request or letters rogatory
The document says a law enforcement authority may need to ask designated government authorities for legal assistance under the Mutual Legal Assistance Treaty (MLAT) framework, or by letters rogatory. An example is when the requesting authority is in a different country from the TikTok entity that serves the user (which depends on the user's location, per Section 1). The FAQ adds that TikTok U.S. will in certain circumstances tell an authority that an MLAT request is necessary to obtain the data, and that TikTok will try to say whether MLAT is appropriate and point to the designated central authority in the relevant country.
Supporting quotations
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.
For instance, this may arise in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user whose data is requested (refer to Section 1 above).
This is based on the location of the relevant user.
In certain circumstances, TikTok U.S will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data.
On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.
Qualifications & exceptions
The statement is that a different-country situation "may" require MLAT, not that it always does.
TikTok will "endeavour" to say whether MLAT is appropriate, which is not a guarantee.
Not stated here
The document does not list which countries' authorities need MLAT or which circumstances beyond the example.
Legal Rights & Agreement Rules · Restriction or exception
Officials must give complete, accurate information and handle received data lawfully
In submitting a request, law enforcement officials are required to make sure the information they give is complete and accurate to the best of their knowledge and good-faith belief, and that the disclosure or other action asked for is necessary and proportionate for preventing, detecting or investigating offences, or for preventing an emergency. Once law enforcement has received the data, the authority is required to handle it in line with applicable laws, including relevant data protection laws.
Supporting quotations
In submitting a request, law enforcement officials are required to ensure that any information provided is complete and accurate to the best of their knowledge and good faith belief, and that the disclosure (or other action) requested is necessary and proportionate for the purposes of the prevention, detection or investigation of offences, or to prevent an emergency.
Once received by law enforcement, the law enforcement authority is required to handle such data in accordance with applicable laws, including relevant data protection laws.
Qualifications & exceptions
These are obligations on the requesting official and authority; the document does not say how TikTok U.S. checks or enforces them.
Not stated here
The document does not say what follows if a request is later found incomplete or inaccurate.
Legal Rights & Agreement Rules · Context
TikTok U.S. may update the Guidelines; updates appear on its website
TikTok U.S. may update the Guidelines from time to time, and says changes may be informed by factors such as legal or human rights developments and operational or product changes to the platform. It says all relevant updates will be reflected on the TikTok U.S. website.
Supporting quotations
TikTok U.S. may update these Guidelines from time to time, and such changes may be informed by a range of factors, including legal or human rights developments, operational and/or product changes to the Platform.
All relevant updates will be reflected on the TikTok U.S. website.
Qualifications & exceptions
The only stated notice of change is that updates will be reflected on the website; no separate notice to officials or users is described.
Not stated here
The document does not say how far in advance changes are posted or how they are marked.
Legal Rights & Agreement Rules · Company practice
FAQ: every request gets a case-by-case review by a dedicated response team
The FAQs are to be read together with the Law Enforcement Guidelines. TikTok U.S. repeats that it is committed to cooperating with law enforcement while respecting users' privacy, freedom of expression and other rights. It says all requests it receives are assessed case by case by its dedicated law enforcement response team before any user data is disclosed, and that this team is trained to evaluate requests and frequently does outreach to explain TikTok U.S.'s requirements for disclosing user data.
Supporting quotations
These FAQS should be read together with TikTok U.S.’s
What is TikTok U.S.’s approach to handling data requests from law enforcement authorities?
TikTok U.S. is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of our users.
All requests received undergo a case-by-case assessment by TikTok U.S’s dedicated law enforcement response team before any user data is disclosed.
This team is trained to evaluate requests from law enforcement authorities and frequently engages in outreach to communicate TikTok U.S’s requirements for disclosing user data to law enforcement authorities.
Qualifications & exceptions
The assessment is stated to happen before any user data is disclosed.
Not stated here
The training, the team's size and the criteria of the case-by-case assessment are not described.
Legal Rights & Agreement Rules · Context
FAQ: disclosure requirements come from the Guidelines and vary by country
The FAQ says TikTok U.S.'s requirements for disclosing user data to law enforcement are set out in the Law Enforcement Guidelines, in particular Sections 1 and 3. It says they reflect TikTok U.S.'s internal policies and procedures and are based on applicable legal requirements and its commitment to international human rights, including the International Bill of Human Rights. Because laws differ from country to country, the rules on when data can legally be disclosed also vary to some extent, and TikTok U.S. says its policies and procedures reflect this along with its commitments to freedom of expression and privacy.
Supporting quotations
What are TikTok U.S’s requirements for disclosing user data to law enforcement authorities?
TikTok U.S’s requirements for disclosing user data to law enforcement authorities are clearly set out in TikTok U.S. Law Enforcement Guidelines (in particular see Sections 1 and 3).
These requirements reflect our internal policies and procedures for handling requests from law enforcement authorities, and are based on applicable legal requirements and our commitment to international human rights, including the International Bill of Human Rights.
Because the applicable laws vary from one country to another, the rules on when data can legally be disclosed will also vary to some extent and our internal policies and procedures reflect this while at the same time reflecting our global commitments to freedom of expression and privacy.
Qualifications & exceptions
The rules on when data can legally be disclosed vary by country, "to some extent".
Not stated here
The FAQ does not say how the country variations change what U.S.-based users' data requires.
Legal Rights & Agreement Rules · Procedure
FAQ: where to find a TikTok username
The FAQ says a TikTok username is on the user's profile page, below the profile photo, shown as @ followed by the name. The username is one of the account identifiers a request can use.
Supporting quotations
How do I find a TikTok username?
A TikTok username can be found on a user's profile page, below their profile photo, shown as @xxxxxx.
Qualifications & exceptions
This is practical guidance for finding the identifier; it does not change which identifiers TikTok U.S. approves.
Legal Rights & Agreement Rules · Restriction or exception
FAQ: common reasons TikTok U.S. may reject a request
TikTok U.S. may reject requests that do not meet the requirements in the Guidelines. The most common examples are requests not addressed to the correct TikTok entity; requests that do not specify the legal process authorizing law enforcement to request and collect information; requests that do not say what offence is under investigation, the circumstances and how it connects to TikTok; and overly broad requests for all user data or where no date range is given.
Supporting quotations
Does TikTok U.S ever reject data requests from law enforcement authorities?
TikTok U.S may reject data requests from law enforcement authorities where they do not meet the requirements that are clearly set out in TikTok U.S. Law Enforcement Guidelines.
The most common examples are as follows:
Requests that are not addressed to the correct TikTok entity;
Requests that do not specify the legal process which authorizes law enforcement to request and collect information;
Requests that do not indicate the type of offence(s) under investigation, the circumstances of the offence(s) and in what way it/they are connected to TikTok; and
Overly broad requests for “all user data” or where there are no date ranges indicated.
requests must be addressed to the correct TikTok entity
Qualifications & exceptions
The wording is "may reject" and the list is of "the most common examples", not every ground.
Not stated here
The FAQ does not say whether a rejected request can be corrected and resubmitted.
Legal Rights & Agreement Rules · Company practice
FAQ: besides rejecting, TikTok U.S. may narrow requests, ask for more, or point to MLAT
Besides rejecting requests not made through the proper legal process and requirements, TikTok U.S. says that, in line with applicable law, it will seek to narrow a request by the volume of data, the number of users or the time period; ask for further information, in particular details of the legal process or the offence under investigation; or tell the authority that a request through the Mutual Legal Assistance Treaty process is necessary to obtain the data. The Guidelines explain that MLAT or letters rogatory may be needed, for example, when the authority is in a different country from the entity serving the user.
Supporting quotations
How else does TikTok U.S ensure that requests from law enforcement authorities are valid?
Aside from rejecting requests from law enforcement authorities that are not made in accordance with the relevant legal processes and requirements, TikTok U.S will in accordance with applicable law:
Seek to narrow the scope of data requests in terms of the volume of data requested, the number of users they relate to and/or the time period to which they relate;
Ask for further information in support of the request (in particular, for details of the relevant legal process and/or the type of offence(s) under investigation); or
Communicate to the requesting law enforcement authorities that a request via the Mutual Legal Assistance Treaty (“MLAT”) process is necessary to obtain disclosure of the requested data.
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.
Qualifications & exceptions
The steps are done "in accordance with applicable law".
The list is introduced as what TikTok U.S. will do aside from rejecting, but the three steps are alternatives joined by "or".
Not stated here
The FAQ does not say how TikTok U.S. chooses between narrowing, asking for information and pointing to MLAT.
Legal Rights & Agreement Rules · Company practice
FAQ: TikTok may report fraudulent attempts to obtain user data
The FAQ says TikTok may report any fraudulent attempts to obtain user data to the relevant authorities.
Supporting quotations
TikTok may report any fraudulent attempts to obtain user data information to relevant authorities.
Qualifications & exceptions
The wording is "may report".
Not stated here
The FAQ does not say what counts as a fraudulent attempt or which authorities receive reports.
Legal Rights & Agreement Rules · Context
FAQ: authorities in any country can submit requests, but disclosure requirements vary
The FAQ says law enforcement authorities in any country can send a request to TikTok U.S., but the requirements for disclosing data depend on where the user is, where the requesting authority is and, in some cases, the type of data. In certain circumstances TikTok U.S. will tell an authority that a request through the Mutual Legal Assistance Treaty (MLAT) process is necessary to get the data. The Guidelines themselves are described as a reference for requests about U.S.-based users.
Supporting quotations
Does TikTok U.S accept data requests from law enforcement authorities in all countries?
While law enforcement authorities in any country can submit a request to TikTok U.S, the requirements for data disclosure will vary depending on the location of the user, the location of the requesting law enforcement authority and, in certain cases, the type of data requested.
In certain circumstances, TikTok U.S will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data.
These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of U.S.-based users of the TikTok platform (the “Platform”), which is operated by TikTok USDS Joint Venture LLC in the United States (“TikTok U.S.”).
Qualifications & exceptions
Accepting a submission from any country is not the same as agreeing to disclose; disclosure requirements vary with the user's location, the authority's location and sometimes the data type.
Not stated here
The FAQ does not set out the requirements for each country or data type.
Legal Rights & Agreement Rules · Context
FAQ: what a Mutual Legal Assistance Treaty is
The FAQ explains that an MLAT is a treaty between two or more countries that sets out how each will help the others in legal matters such as criminal investigations. Through an MLAT, one country's government can ask another country's government for help getting information from companies located in that other country.
Supporting quotations
What is a Mutual Legal Assistance Treaty (“MLAT”)?
An MLAT is a treaty between two or more countries that defines how each will assist in legal matters, such as in criminal investigations.
Through an MLAT, the government of one country can seek assistance from the government of another country in obtaining information from companies located in the other country.
Qualifications & exceptions
This is a general explanation of the term, not a statement of any particular treaty.
FAQ: MLAT may be needed when the authority is in a different country from the serving entity
The FAQ says MLAT may be needed when the requesting authority is in a different country from the TikTok entity that provides the service to the user (see Section 1, where the entity depends on the user's location). If an authority is unsure whether to use MLAT, it can contact TikTok, and TikTok says it will endeavour to tell the authority whether MLAT is appropriate and to direct it to the designated central authority for MLAT purposes in the appropriate country.
Supporting quotations
In what circumstances may it be necessary for law enforcement authorities to rely on the MLAT process?
It may be necessary in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user
If law enforcement are unclear as to whether they should rely on MLAT, they can contact TikTok.
On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.
This is based on the location of the relevant user.
Qualifications & exceptions
MLAT "may" be necessary; the FAQ does not say it is always necessary in the cross-border situation.
TikTok "will endeavour" to answer, which is not a guarantee of an answer.
Not stated here
The designated central authorities are not named.
Legal Rights & Agreement Rules · Procedure
FAQ: non-law enforcement requests go to other channels
Requests that do not come from law enforcement are directed elsewhere. To report content that may break TikTok's Community Guidelines, the FAQ points to a TikTok help page on how to report content. Reports of alleged copyright or trademark infringement are to be made in line with TikTok's Intellectual Property Policy and can be filed as a Copyright Infringement Report or a Trademark Infringement Report.
Supporting quotations
Where should non-law enforcement requests be sent?
Non-law enforcement requests should be directed as follows:
Report Content: Details of how to report various types of content that may be in breach of TikTok’s Community Guidelines are available
Report IP infringement: Reports of alleged copyright or trademark infringement should be made in accordance with TikTok’s
Only two non-law enforcement routes are listed: content reports and IP infringement reports.
Not stated here
The linked help page, the Community Guidelines and the Intellectual Property Policy are not part of this source, so their content is not covered.
Legal Rights & Agreement Rules · Company practice
FAQ: response times vary; mark time-sensitive requests
TikTok U.S.'s response team says it tries to respond to all requests in a timely way, but response times vary, for example with caseload and the complexity of the request. If a request is time-sensitive, the officer is asked to say so in the request and explain why. Longer response times can be expected when a request does not meet the requirements in the Guidelines and the FAQs.
Supporting quotations
How quickly does TikTok U.S process requests?
TikTok U.S’s dedicated law enforcement response team endeavours to respond to all requests in a timely manner but response times can vary in particular due to the caseload volume at a given time and the complexity of a request.
If a particular request is time-sensitive, we would ask the requesting law enforcement officer to note this in the request (explaining the reasons).
Longer response times can be expected where the request does not meet the requirements set out in our
Qualifications & exceptions
The team "endeavours" to respond in a timely manner; no response time is promised.
Not stated here
No response time target is given.
Legal Rights & Agreement Rules · Procedure
FAQ: follow-up requests after a Cybertip report still must meet the Guidelines
If law enforcement has received a Cybertip report that TikTok U.S. made to NCMEC and now wants more user data for an investigation, the request must still meet the requirements in the Guidelines and the FAQs. To help TikTok U.S. process it more efficiently, the request should include the report number NCMEC assigned to the Cybertip report.
Supporting quotations
What do I do if I receive a Cybertip report made by TikTok U.S to NCMEC?
If law enforcement has received a Cybertip report made by TikTok U.S to NCMEC, and is now requesting further user data in connection with an investigation, the request must meet the requirements set out in our
To help us more efficiently process your request, please specify in your request the report number assigned to the Cybertip report by NCMEC.
Qualifications & exceptions
Including the report number is requested to speed processing; it is worded as "please specify".
Not stated here
The FAQ does not say what data TikTok U.S. included in the original Cybertip report.