These Guidelines tell law enforcement how to request data of U.S.-based users
The Guidelines, last updated 6 October 2026, are a reference for law enforcement officials who want the data of U.S.-based users of the TikTok platform, which TikTok USDS Joint Venture LLC operates in the United States (the document calls it "TikTok U.S."). TikTok U.S. says it is committed to cooperating with law enforcement while respecting its users' privacy, freedom of expression and other rights, and that, besides these Guidelines, it has internal policies and procedures for handling and responding to law enforcement requests. It says those procedures are informed by legal and human rights standards and are meant to limit adverse human rights impacts while still letting it comply with legitimate, valid legal requests to disclose user data, including from regulatory authorities where relevant. It rejects requests that go against its policies and procedures.
Supporting quotations
Last updated: 6 October 2026
These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of U.S.-based users of the TikTok platform (the “Platform”), which is operated by TikTok USDS Joint Venture LLC in the United States (“TikTok U.S.”).
TikTok U.S. has internal policies and procedures governing how TikTok U.S. handles and responds to law enforcement requests.
while enabling TikTok U.S. to comply with legitimate, valid legal requests from law enforcement (including regulatory authorities, where relevant) to disclose user data
If your request relates to TikTok U.S. Shop data, please refer to the
We reject requests which go against our policies and procedures.
Qualifications & exceptions
The Guidelines address requests for data of U.S.-based users; requests about users outside the United States are sent to a separate global version.
Requests that relate to TikTok U.S. Shop data are sent to a separate TikTok Shop guideline instead of these Guidelines.
Not stated here
The internal policies and procedures are not set out in this document, so what they add to the Guidelines and how they are applied is not stated.
The linked TikTok Shop guideline, the global Guidelines and the human rights statement are not part of this source, so their content is not covered.
Legal Rights & Agreement Rules · Procedure
Requests must go to the TikTok entity for the user's location
Requests must be addressed to the correct TikTok entity, and that depends on where the user is located. For users located in the United States, the addressee is TikTok USDS Joint Venture LLC at the Culver City, California address given in the Guidelines. For users located outside the United States, officials are sent to the global version of the TikTok Law Enforcement Guidelines. An official who is unsure where the user is located is told to enter the username or another identifier into the TikTok Safety Enforcement Tool to confirm the region or country. A request addressed to the wrong TikTok entity may not be processed until that is fixed, which can cause delay.
Supporting quotations
requests must be addressed to the correct TikTok entity
This is based on the location of the relevant user.
Requests for data of users located in the United States:
TikTok USDS Joint Venture LLC 5800 Bristol Parkway, Suite 300 Culver City, CA 90230 UNITED STATES
For requests for data of users located outside the United States, please refer to the global version of the
If you are unsure of where the user is located, please insert the username (or other identifier) on the
requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay
Qualifications & exceptions
The entity is chosen by the user's location, not by where the requesting authority is.
A wrong-entity request "may not be processed until this has been rectified"; the FAQ later lists requests not addressed to the correct entity among common reasons a request may be rejected.
Not stated here
The asterisk after "entity" in the source has no footnote text anywhere in this document.
The global Guidelines and the Safety Enforcement Tool are linked but not supplied, so what they say or require is not covered.
Legal Rights & Agreement Rules · Procedure
Requests go through TikTok's webform, in PDF and English, not informal channels
Requests must be submitted through TikTok's law enforcement webform, with any attachments (for example an official warrant, court order or other supporting documents) in PDF format; Word-format attachments will not be accepted. All requests and supporting documents, including orders, warrants and subpoenas or equivalent, must be in English or come with a translation. TikTok U.S. says it will not respond to requests for user data sent by people who are not law enforcement officials, or sent through informal channels such as personal email addresses.
Supporting quotations
requests must be submitted to our webform:
with any attachments (for example, official warrant, court order, or other documentation supporting the request) in PDF format (word format will not be accepted).
All requests to TikTok U.S. and any supporting documents (including orders, warrants, and/or subpoenas or equivalent) must be provided in English or with a translation.
TikTok U.S. will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).
Qualifications & exceptions
Word-format attachments are not accepted; PDF is the stated format.
Non-English requests and documents need a translation.
Not stated here
The webform itself is linked but not supplied, so any fields or limits it imposes are not covered.
Legal Rights & Agreement Rules · Restriction or exception
Confirming receipt does not waive TikTok U.S.'s objections
If TikTok U.S. confirms it received a message, it says that is for convenience only. Sending that confirmation does not give up any right to object, and the document names lack of jurisdiction, invalid legal process and improper service as examples of objections it keeps.
Supporting quotations
Any confirmation of receipt of correspondence is for convenience only and, in doing so, TikTok U.S. does not waive any right of objection (including for lack of jurisdiction, invalid legal process or lack of proper service).
Qualifications & exceptions
The list of objections is given as examples ("including"), not as a complete list.
Not stated here
The document does not say that a confirmation of receipt means a request has been accepted or will be answered.
Data Access & Collection · Company practice
Subscriber, log-in and interaction data TikTok U.S. may hold
TikTok U.S. lists the user data it may hold that can be the subject of a valid law enforcement request. The first groups are: subscriber information (TikTok username, email address and phone number depending on the user's sign-up method, account creation date, IP address at account creation, and device information); log-in and log-out data (the IP address of account log-ins and log-outs); and interaction data that is not content (IP address logs for interactions, for a specified period only, and video creation time and date). The wording is "may hold": the list says what could be requested, not that every item exists for every user or will be handed over.
Supporting quotations
TikTok U.S. may hold the following user data, which can be the subject of a valid law enforcement request:
Subscriber information
TikTok username
Email address (depending on user’s sign-up method)
Phone number (depending on user’s sign-up method)
Account creation date
IP address at account creation
Device information
Log-in / log-out data
IP address of account log-ins/log-outs
Interaction data (non-content)
IP address logs for interactions (for a specified period only)
Video creation time/date
Qualifications & exceptions
Email address and phone number are held depending on the user's sign-up method.
IP address logs for interactions are kept "for a specified period only".
Being listed does not mean TikTok U.S. will disclose the item; each request must also meet the legal requirements.
Not stated here
The period for interaction IP address logs is not given.
"Device information" is not broken down into specific fields.
Data Access & Collection · Company practice
Content and transaction data TikTok U.S. may hold
The list of data TikTok U.S. may hold also includes content data (video content, comments and direct message content) and transaction data (payment information, such as debit or credit card information, and gifts received or sent). As with the other categories, the document says TikTok U.S. "may hold" this data and that it can be the subject of a valid law enforcement request. The paragraph after the list says requests for content data generally need a domestic court or judicial order, warrant or equivalent.
Supporting quotations
TikTok U.S. may hold the following user data, which can be the subject of a valid law enforcement request:
Content data
Video content
Comments
Direct message content
Transaction data
Payment information, such as debit/credit card information
Gift received/sent
Qualifications & exceptions
"Such as" in the payment information item means the examples are not a complete list.
Listing an item does not mean TikTok U.S. will disclose it; content data generally needs a court order, warrant or equivalent.
Not stated here
The document does not say how long content or transaction data is kept.
Legal Rights & Agreement Rules · Restriction or exception
Requests must name the data type and legal basis; content data generally needs a court order
Each request must clearly say which type of data is wanted and the legal basis for asking. If a request does not meet the legal requirements that apply to that data, as listed in Section 3, the data will not be disclosed. The document says this is particularly true for content data, for which it says the requirements generally call for a domestic court or judicial order, warrant or equivalent. Section 3 adds that the scope of data requested should be clearly specified and that overly broad requests will be refused, and that the request should cite the legal process that authorizes law enforcement to request and collect information to prevent, detect or investigate criminal offences.
Supporting quotations
Each request must clearly specify the type of data requested and the legal basis for requesting it.
If the request does not meet the applicable legal requirements for the requested data (as listed in Section 3 below), the data will not be disclosed.
This is in particular the case for requests relating to content data (which generally require a domestic court / judicial order, warrant or equivalent).
Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Qualifications & exceptions
For content data the requirement is described as one that "generally" applies, and a "domestic" court or judicial order.
Section 3 words some items as "should" while introducing the whole list as things every request "must" include.
Not stated here
The document does not set out which specific legal process is needed for each data category other than content data.
Whether any exception to the content data requirement applies is not stated in this section; emergency disclosure is covered separately.
Legal Rights & Agreement Rules · Procedure
Requests must be signed PDFs on letterhead and name the TikTok application
To ensure timely processing, every law enforcement request must be sent in a non-editable electronic format (such as PDF), on official law enforcement agency letterhead, signed and dated. The legal process itself (a preservation request, subpoena, court order or warrant) must explicitly name the TikTok application in the body of the document. Generic requests, or legal process that names unrelated third-party services, will not be accepted.
Supporting quotations
all law enforcement requests must be submitted in a non-editable electronic format (such as PDF), written on official law enforcement agency letterhead, signed, and dated.
The legal process (preservation request, subpoena, court order, or warrant) must explicitly name the TikTok application within the body of the document itself.
Generic requests or process naming unrelated third-party services will not be accepted.
Qualifications & exceptions
The format rule is stated as a requirement for timely processing; the application-naming rule says non-conforming process "will not be accepted".
Not stated here
The document does not say what happens to a request that is not signed, dated or on letterhead beyond the timely-processing purpose.
Legal Rights & Agreement Rules · Procedure
Requests must identify the requesting authority and officer
Every request must include details of the requesting law enforcement authority (or court) and of the requesting officer. For the authority, that means its name and location; for a court order, the request should give the location and name of the court and the judge or magistrate. For the officer, it means name, badge or identification number, email address (which must be from an official email domain) and phone number, including any direct-dial extension.
Supporting quotations
Every request must additionally include all of the following information:
Details of requesting law enforcement authority (or Court):
Requesting Authority (or Court): The name and location of the relevant authority. In the case of a Court order, the request should indicate the location and name of the relevant Court and judge / magistrate.
Requesting officer: The requesting officer’s name, badge / identification number, email address (this must be from an official email domain) and phone number (including any direct dial extension).
Qualifications & exceptions
The list is introduced with "must", but the court and judge details are worded as "should"; the email domain wording is "must be from an official email domain".
Not stated here
The document does not say how the official email domain is checked.
Legal Rights & Agreement Rules · Procedure
Requests must identify the user account with an approved identifier
When asking for data about a specific user, the request must give a specific TikTok username or another approved account identifier tied to that account. TikTok U.S. also asks for a screenshot of the account to help it find the right one faster. The approved identifiers are: TikTok User ID; TikTok username (an account URL or screenshot is accepted); phone number; email address; and video ID (a video URL or screenshot is accepted).
Supporting quotations
Details of relevant user account:
When requesting data regarding a specific user of the Platform, you must provide a specific TikTok username or an approved account identifier associated with the relevant account.
We also request that a screenshot of the relevant account be provided (to help us to identify the correct account more quickly).
TikTok User ID
TikTok username (account URL or screenshot accepted)
Phone number
Email address
Video ID (video URL or screenshot accepted)
Qualifications & exceptions
The screenshot is requested, not required, and the aim is to find the correct account more quickly.
The identifier must be one TikTok lists as approved.
Not stated here
The document does not say what happens if only an unapproved identifier is provided.
Legal Rights & Agreement Rules · Procedure
Requests must be narrowly scoped and give a date range
The request should clearly state the scope of the data wanted, and overly broad requests will be refused. It must also give a date (and a time if possible) or a date range, as relevant to the request; that date requirement is stated for historic data only.
Supporting quotations
Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.
Date range: The request must specify a date (and, if possible, a time), or a date range as relevant to the request (for historic data only).
Qualifications & exceptions
The date or date range requirement is described "as relevant to the request" and "for historic data only".
Not stated here
The document does not define how broad is "overly broad" beyond the examples in the FAQ.
Legal Rights & Agreement Rules · Procedure
Requests should cite the legal process and the offence under investigation
The request should cite the legal process, by the relevant article or section of an Act, statute or code, that authorizes law enforcement to request and collect information to prevent, detect or investigate criminal offences. It should separately state the type of offence under investigation (again citing the relevant article or section), the circumstances of the offence and how it connects to the platform.
Supporting quotations
Legal basis for the request:
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Context and Offence(s) under investigation: The request should separately indicate the type of offence(s) under investigation (citing the relevant article or section of Act / Statute / Code), the circumstances of the offence and in what way it is connected to the Platform.
Qualifications & exceptions
These items are worded as "should" although the list is introduced as things every request "must" include.
Not stated here
The Acts, statutes and codes a request might cite are not named in this document.
Sharing & Disclosure · Company commitment
TikTok U.S. policy is to notify U.S. users of data production, with exceptions
TikTok U.S.'s stated policy is to tell U.S. TikTok users when it produces their data to law enforcement under legal process. It does not do so where the law prohibits notice, or where it decides, in its sole discretion, that exceptional circumstances apply, for example in child exploitation cases or when notice could otherwise put individuals at risk of harm. Requests are asked to say whether user notification is permitted.
Supporting quotations
Our policy is to notify U.S. TikTok users of our production of user data to law enforcement pursuant to legal process, unless prohibited by law or where we determine in our sole discretion that exceptional circumstances apply, including, for example, in child exploitation cases or when such notice could otherwise put individuals at risk of harm.
User notification: Please indicate whether user notification is permitted (see Section 4 below).
Qualifications & exceptions
The exceptions are notice prohibited by law, and exceptional circumstances that TikTok U.S. decides in its sole discretion; child exploitation cases and risk of harm are given as examples ("including, for example").
The policy covers notice of production of user data pursuant to legal process; other sections say that, as a general practice, users are not notified of preservation or emergency requests.
Not stated here
The document does not say when or how a user is notified, or how long after production.
Cross-references
contrast (model-proposed): General practice is not to notify users of preservation requests — contrast: The Guidelines say TikTok U.S.'s policy is to notify U.S. users when it produces their data under legal process, while the preservation section says its general practice is not to notify users of preservation requests. The two cover different steps (production versus preservation), and the document does not reconcile them.
contrast (model-proposed): General practice is not to notify users of emergency requests — contrast: The notification policy for data production under legal process points one way, and the emergency section's general practice of not notifying users of emergency requests points the other. The document does not say whether a user is told after emergency data is produced.
Sharing & Disclosure · Restriction or exception
No notice where the law prohibits it; agencies should provide a court order
TikTok U.S. says it will not notify users when the law prohibits notice, including when it receives a court order against notification. A law enforcement agency that thinks notice would jeopardize an investigation or have other adverse results is told to provide a court order or other binding legal process that prohibits notification.
Supporting quotations
We will not provide user notification when it is prohibited by law, including when we receive a court order prohibiting user notification.
Law enforcement agencies that believe user notification would jeopardize an investigation or have other adverse results should provide a court order or other binding legal process prohibiting notification.
Qualifications & exceptions
An agency's belief that notice would harm an investigation is not stated to be enough by itself; the document asks for a court order or other binding legal process.
Not stated here
The document does not say whether TikTok U.S. delays notice while it reviews a non-disclosure request.
Delayed notice may be given once a non-disclosure order or restriction expires
If a legal non-disclosure order or statutory restriction on notice ends, TikTok may give the affected user delayed notice after the prohibition has expired, consistent with applicable law and platform policy.
Supporting quotations
Where a legal non-disclosure order or statutory restriction expires, TikTok may provide delayed notice to the affected user following the expiration of the legal prohibition, consistent with applicable law and platform policy.
Qualifications & exceptions
The wording is "may provide", not a commitment to give delayed notice.
Delayed notice must be consistent with applicable law and platform policy.
Not stated here
The document does not say how soon after expiry, or in what form, delayed notice would be given.
Preservation: user data held for 90 days, with one 90-day extension
TikTok U.S. says it will honor formal law enforcement requests to preserve user data for 90 days, but only if the request meets the criteria set out earlier. It preserves information for an initial 90 days and may extend for one additional 90-day period on receiving a formal request to extend. It may not honor multiple extension requests beyond that one additional period.
Supporting quotations
TikTok U.S. will honor formal requests by law enforcement to preserve user data for 90 days only if it fulfils the criteria above.
TikTok U.S. will preserve information for an initial 90 day period (and may extend for an additional 90-day period upon receipt of a formal request to extend the preservation).
We may not honour multiple extension requests beyond one additional 90-day period.
Qualifications & exceptions
Preservation is conditional on the request meeting the criteria set out in the Guidelines.
The extension is described as something TikTok U.S. "may" do on a formal request.
Not stated here
The document does not say which data types or accounts are preserved or whether the preserved data is kept separately from the live account.
Retention & Deletion · Company practice
Preserved data may be deleted if no legal process arrives in time
If TikTok U.S. does not receive formal legal process for the preserved information before the preservation period ends, the preserved information may be deleted when the period expires.
Supporting quotations
If TikTok U.S. does not receive formal legal process for the preserved information before the end of the preservation period, the preserved information may be deleted when the preservation period expires.
Qualifications & exceptions
The wording is "may be deleted", so deletion at expiry is permitted rather than guaranteed.
Not stated here
The document does not say whether preserved data is deleted by a set deadline after expiry.
Retention & Deletion · Procedure
Preservation requests: webform, letterhead, specific data; broad ones are not actioned
Preservation requests go through the same webform with the request attached as a PDF. They must be on law enforcement letterhead, signed, and clearly identify the specific user data to preserve by username, data type and date range as set out in Section 3. Overly broad or unspecific preservation requests will not be actioned.
Supporting quotations
Please submit all preservation requests to the webform:
with your preservation request attached in PDF format.
Preservation requests must be sent on law enforcement letterhead, signed, and must clearly identify the specific user data to be preserved (by reference to username, the data type and date ranges as per Section 3 above).
Overly broad or unspecific preservation requests will not be actioned.
Qualifications & exceptions
Preservation requests must meet the criteria that apply to other requests, as the Guidelines say elsewhere.
Not stated here
The webform is linked but not supplied.
Sharing & Disclosure · Company practice
General practice is not to notify users of preservation requests
TikTok U.S. says its general practice is not to tell users about preservation requests, subject to applicable law and policy. This sits alongside the policy of notifying users when data is produced under legal process.
Supporting quotations
It is our general practice not to notify users of preservation requests, subject to applicable law and policy.
Qualifications & exceptions
This is described as a "general practice", subject to applicable law and policy, not an absolute rule.
Not stated here
The document does not say whether a user is told later if preserved data is produced.
Legal Rights & Agreement Rules · Procedure
Disclosing preserved data still requires meeting Sections 1 and 3
Preservation alone does not hand data over. To ask for disclosure of the preserved data, the requirements in Sections 1 and 3 of the Guidelines apply: the request must go to the right TikTok entity for the user's location, through the webform with PDF attachments, in English or translated, from law enforcement officials and not through informal channels, and must carry the Section 3 information.
Supporting quotations
To seek disclosure of preserved data, the requirements set out in Sections 1 and 3 of these Guidelines will apply.
requests must be addressed to the correct TikTok entity
Requests for data of users located in the United States:
TikTok USDS Joint Venture LLC 5800 Bristol Parkway, Suite 300 Culver City, CA 90230 UNITED STATES
requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay
requests must be submitted to our webform:
TikTok U.S. will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).
Qualifications & exceptions
Section 1 covers where and how a request is submitted; Section 3 covers what it must contain.
Not stated here
The document does not say whether a preservation request that already met Sections 1 and 3 must be resubmitted when disclosure is sought.
Sharing & Disclosure · Company practice
Emergency requests: TikTok U.S. may disclose data it judges necessary to prevent imminent harm
TikTok U.S. says it has processes for emergency requests and evaluates each one case by case. If the information it receives is, in its assessment, enough to establish a good-faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, it may provide the user data necessary to prevent that harm, as permitted by applicable law. The FAQ repeats this as one of the cases where TikTok U.S. may disclose data without a formal legal request.
Supporting quotations
TikTok U.S. has processes in place to handle emergency requests.
Such requests are evaluated on a case-by-case basis: if as part of an emergency request we receive information that is sufficient in our assessment to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Emergency circumstances: As explained in Section 5 of the Law Enforcement Guidelines, where satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Qualifications & exceptions
The standard is TikTok U.S.'s own assessment of a good-faith belief of imminent harm, risk of death or serious physical injury.
Only the user data "necessary to prevent that harm" may be provided, and only "as permitted by applicable law"; the wording is "may".
Not stated here
The FAQ says emergency disclosure is "explained in Section 5", but in this document Section 5 is Preservation Requests and emergency requests are Section 6; the document does not explain the mismatch, and this card follows the Section 6 text.
The document does not say which data types may be provided in an emergency.
Legal Rights & Agreement Rules · Procedure
Emergency requests: webform, sworn law enforcement official, official email domain
To make an emergency request, the official must use TikTok's webform. Emergency requests must be made by a sworn law enforcement official and, if sent by email, must come from an official law enforcement email domain. People who are not law enforcement and know of an emergency are told to contact local law enforcement officials immediately and directly.
Supporting quotations
To request this data, you must submit your request through our web form:
All emergency requests must be made by a sworn law enforcement official, and come from an official law enforcement email domain (if sent via email).
Non-law enforcement personnel aware of an emergency situation should immediately and directly contact local law enforcement officials.
Qualifications & exceptions
The email-domain condition is written "if sent via email"; the same paragraph says to use the web form, and the document does not explain when email is used.
Not stated here
The document does not say how "sworn" status or the email domain is verified.
Sharing & Disclosure · Company practice
General practice is not to notify users of emergency requests
TikTok U.S. says its general practice is not to tell users about emergency requests, subject to applicable law and policy.
Supporting quotations
It is our general practice not to notify users of emergency requests, subject to applicable law and policy.
Qualifications & exceptions
This is a "general practice", subject to applicable law and policy.
Not stated here
The document does not say whether a user is told later after an emergency disclosure.
Legal Rights & Agreement Rules · Procedure
Cross-border requests may need a Mutual Legal Assistance Treaty request or letters rogatory
The document says a law enforcement authority may need to ask designated government authorities for legal assistance under the Mutual Legal Assistance Treaty (MLAT) framework, or by letters rogatory. An example is when the requesting authority is in a different country from the TikTok entity that serves the user (which depends on the user's location, per Section 1). The FAQ adds that TikTok U.S. will in certain circumstances tell an authority that an MLAT request is necessary to obtain the data, and that TikTok will try to say whether MLAT is appropriate and point to the designated central authority in the relevant country.
Supporting quotations
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.
For instance, this may arise in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user whose data is requested (refer to Section 1 above).
This is based on the location of the relevant user.
In certain circumstances, TikTok U.S will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data.
On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.
Qualifications & exceptions
The statement is that a different-country situation "may" require MLAT, not that it always does.
TikTok will "endeavour" to say whether MLAT is appropriate, which is not a guarantee.
Not stated here
The document does not list which countries' authorities need MLAT or which circumstances beyond the example.
Legal Rights & Agreement Rules · Restriction or exception
Officials must give complete, accurate information and handle received data lawfully
In submitting a request, law enforcement officials are required to make sure the information they give is complete and accurate to the best of their knowledge and good-faith belief, and that the disclosure or other action asked for is necessary and proportionate for preventing, detecting or investigating offences, or for preventing an emergency. Once law enforcement has received the data, the authority is required to handle it in line with applicable laws, including relevant data protection laws.
Supporting quotations
In submitting a request, law enforcement officials are required to ensure that any information provided is complete and accurate to the best of their knowledge and good faith belief, and that the disclosure (or other action) requested is necessary and proportionate for the purposes of the prevention, detection or investigation of offences, or to prevent an emergency.
Once received by law enforcement, the law enforcement authority is required to handle such data in accordance with applicable laws, including relevant data protection laws.
Qualifications & exceptions
These are obligations on the requesting official and authority; the document does not say how TikTok U.S. checks or enforces them.
Not stated here
The document does not say what follows if a request is later found incomplete or inaccurate.
Charges & Financial Obligations · Company practice
TikTok U.S. reserves the right to seek reimbursement of response costs
TikTok U.S. reserves the right to seek reimbursement for the costs of responding to law enforcement requests.
Supporting quotations
TikTok U.S. reserves the right to seek reimbursement for the costs associated with responding to law enforcement requests.
Qualifications & exceptions
This is a reserved right ("reserves the right to seek"), not a stated charge.
Not stated here
The document does not give amounts, when costs are sought or from whom.
Legal Rights & Agreement Rules · Context
TikTok U.S. may update the Guidelines; updates appear on its website
TikTok U.S. may update the Guidelines from time to time, and says changes may be informed by factors such as legal or human rights developments and operational or product changes to the platform. It says all relevant updates will be reflected on the TikTok U.S. website.
Supporting quotations
TikTok U.S. may update these Guidelines from time to time, and such changes may be informed by a range of factors, including legal or human rights developments, operational and/or product changes to the Platform.
All relevant updates will be reflected on the TikTok U.S. website.
Qualifications & exceptions
The only stated notice of change is that updates will be reflected on the website; no separate notice to officials or users is described.
Not stated here
The document does not say how far in advance changes are posted or how they are marked.
Legal Rights & Agreement Rules · Company practice
FAQ: every request gets a case-by-case review by a dedicated response team
The FAQs are to be read together with the Law Enforcement Guidelines. TikTok U.S. repeats that it is committed to cooperating with law enforcement while respecting users' privacy, freedom of expression and other rights. It says all requests it receives are assessed case by case by its dedicated law enforcement response team before any user data is disclosed, and that this team is trained to evaluate requests and frequently does outreach to explain TikTok U.S.'s requirements for disclosing user data.
Supporting quotations
These FAQS should be read together with TikTok U.S.’s
What is TikTok U.S.’s approach to handling data requests from law enforcement authorities?
TikTok U.S. is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of our users.
All requests received undergo a case-by-case assessment by TikTok U.S’s dedicated law enforcement response team before any user data is disclosed.
This team is trained to evaluate requests from law enforcement authorities and frequently engages in outreach to communicate TikTok U.S’s requirements for disclosing user data to law enforcement authorities.
Qualifications & exceptions
The assessment is stated to happen before any user data is disclosed.
Not stated here
The training, the team's size and the criteria of the case-by-case assessment are not described.
Legal Rights & Agreement Rules · Context
FAQ: disclosure requirements come from the Guidelines and vary by country
The FAQ says TikTok U.S.'s requirements for disclosing user data to law enforcement are set out in the Law Enforcement Guidelines, in particular Sections 1 and 3. It says they reflect TikTok U.S.'s internal policies and procedures and are based on applicable legal requirements and its commitment to international human rights, including the International Bill of Human Rights. Because laws differ from country to country, the rules on when data can legally be disclosed also vary to some extent, and TikTok U.S. says its policies and procedures reflect this along with its commitments to freedom of expression and privacy.
Supporting quotations
What are TikTok U.S’s requirements for disclosing user data to law enforcement authorities?
TikTok U.S’s requirements for disclosing user data to law enforcement authorities are clearly set out in TikTok U.S. Law Enforcement Guidelines (in particular see Sections 1 and 3).
These requirements reflect our internal policies and procedures for handling requests from law enforcement authorities, and are based on applicable legal requirements and our commitment to international human rights, including the International Bill of Human Rights.
Because the applicable laws vary from one country to another, the rules on when data can legally be disclosed will also vary to some extent and our internal policies and procedures reflect this while at the same time reflecting our global commitments to freedom of expression and privacy.
Qualifications & exceptions
The rules on when data can legally be disclosed vary by country, "to some extent".
Not stated here
The FAQ does not say how the country variations change what U.S.-based users' data requires.
Legal Rights & Agreement Rules · Procedure
FAQ: where to find a TikTok username
The FAQ says a TikTok username is on the user's profile page, below the profile photo, shown as @ followed by the name. The username is one of the account identifiers a request can use.
Supporting quotations
How do I find a TikTok username?
A TikTok username can be found on a user's profile page, below their profile photo, shown as @xxxxxx.
Qualifications & exceptions
This is practical guidance for finding the identifier; it does not change which identifiers TikTok U.S. approves.
Legal Rights & Agreement Rules · Restriction or exception
FAQ: common reasons TikTok U.S. may reject a request
TikTok U.S. may reject requests that do not meet the requirements in the Guidelines. The most common examples are requests not addressed to the correct TikTok entity; requests that do not specify the legal process authorizing law enforcement to request and collect information; requests that do not say what offence is under investigation, the circumstances and how it connects to TikTok; and overly broad requests for all user data or where no date range is given.
Supporting quotations
Does TikTok U.S ever reject data requests from law enforcement authorities?
TikTok U.S may reject data requests from law enforcement authorities where they do not meet the requirements that are clearly set out in TikTok U.S. Law Enforcement Guidelines.
The most common examples are as follows:
Requests that are not addressed to the correct TikTok entity;
Requests that do not specify the legal process which authorizes law enforcement to request and collect information;
Requests that do not indicate the type of offence(s) under investigation, the circumstances of the offence(s) and in what way it/they are connected to TikTok; and
Overly broad requests for “all user data” or where there are no date ranges indicated.
requests must be addressed to the correct TikTok entity
Qualifications & exceptions
The wording is "may reject" and the list is of "the most common examples", not every ground.
Not stated here
The FAQ does not say whether a rejected request can be corrected and resubmitted.
Legal Rights & Agreement Rules · Company practice
FAQ: besides rejecting, TikTok U.S. may narrow requests, ask for more, or point to MLAT
Besides rejecting requests not made through the proper legal process and requirements, TikTok U.S. says that, in line with applicable law, it will seek to narrow a request by the volume of data, the number of users or the time period; ask for further information, in particular details of the legal process or the offence under investigation; or tell the authority that a request through the Mutual Legal Assistance Treaty process is necessary to obtain the data. The Guidelines explain that MLAT or letters rogatory may be needed, for example, when the authority is in a different country from the entity serving the user.
Supporting quotations
How else does TikTok U.S ensure that requests from law enforcement authorities are valid?
Aside from rejecting requests from law enforcement authorities that are not made in accordance with the relevant legal processes and requirements, TikTok U.S will in accordance with applicable law:
Seek to narrow the scope of data requests in terms of the volume of data requested, the number of users they relate to and/or the time period to which they relate;
Ask for further information in support of the request (in particular, for details of the relevant legal process and/or the type of offence(s) under investigation); or
Communicate to the requesting law enforcement authorities that a request via the Mutual Legal Assistance Treaty (“MLAT”) process is necessary to obtain disclosure of the requested data.
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.
Qualifications & exceptions
The steps are done "in accordance with applicable law".
The list is introduced as what TikTok U.S. will do aside from rejecting, but the three steps are alternatives joined by "or".
Not stated here
The FAQ does not say how TikTok U.S. chooses between narrowing, asking for information and pointing to MLAT.
Legal Rights & Agreement Rules · Company practice
FAQ: TikTok may report fraudulent attempts to obtain user data
The FAQ says TikTok may report any fraudulent attempts to obtain user data to the relevant authorities.
Supporting quotations
TikTok may report any fraudulent attempts to obtain user data information to relevant authorities.
Qualifications & exceptions
The wording is "may report".
Not stated here
The FAQ does not say what counts as a fraudulent attempt or which authorities receive reports.
Sharing & Disclosure · Company practice
FAQ: in an emergency TikTok U.S. may disclose data without a formal legal request
The FAQ says TikTok U.S. may disclose user data without receiving a formal legal request based on valid legal process. The first case it gives is emergency circumstances: where it is satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, it may provide the user data necessary to prevent that harm, as permitted by applicable law.
Supporting quotations
Does TikTok U.S ever disclose user data outside of formal legal requests?
TikTok U.S may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:
Emergency circumstances: As explained in Section 5 of the Law Enforcement Guidelines, where satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Qualifications & exceptions
The wording is "may disclose", and only data "necessary to prevent that harm" as permitted by applicable law.
The FAQ cites "Section 5" for this explanation; in this document Section 5 is Preservation Requests and emergency requests are in Section 6.
Not stated here
The mismatch between the "Section 5" pointer and the Section 6 emergency text is not explained in the document; Section 6, not Section 5, describes the emergency process.
The FAQ does not say what "formal legal request" the disclosure is exempt from beyond "based on valid legal process".
Cross-references
narrows (model-proposed): Requests must name the data type and legal basis; content data generally needs a court order — exception_to: The Guidelines say a request that does not meet the applicable legal requirements will not lead to disclosure, while the FAQ says TikTok U.S. may disclose user data in emergency circumstances without a formal legal request. The FAQ case is an exception to the legal-requirements rule, limited to data necessary to prevent the harm and to what applicable law permits.
related (model-proposed): Emergency requests: TikTok U.S. may disclose data it judges necessary to prevent imminent harm — references: The FAQ refers to the emergency explanation in the Guidelines but names Section 5; the matching text in this document is Section 6, Emergency requests (Section 5 is Preservation Requests). The relation records the evident target, with the mismatch noted in both cards.
Sharing & Disclosure · Company practice
FAQ: TikTok U.S. reports certain user data to authorities where it has legal obligations
The FAQ lists a second case where TikTok U.S. may disclose user data without a formal legal request: proactive reporting. In limited circumstances, including where TikTok U.S. is subject to legal obligations, it reports certain user data to law enforcement or to designated bodies. Examples given are reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (NCMEC) for child safeguarding, and reporting suspicious financial transactions to the relevant authorities.
Supporting quotations
TikTok U.S may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:
Proactive reporting obligations: In limited circumstances, including where TikTok U.S is subject to legal obligations, TikTok U.S reports certain user data either to law enforcement authorities or to designated bodies.
Examples include reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (“NCMEC”) for child safeguarding purposes and reporting suspicious financial transactions to relevant authorities.
Qualifications & exceptions
The reporting happens "in limited circumstances"; the legal-obligation case is introduced with "including", so the circumstances are not limited to legal obligations.
The examples are examples ("Examples include"), not a full list.
Not stated here
"Certain user data" is not specified, and the "designated bodies" other than NCMEC are not named.
Sharing & Disclosure · Context
FAQ: examples of what may count as an emergency
The FAQ says every emergency disclosure request is assessed case by case by the law enforcement response team on its own circumstances. It gives examples that may constitute an emergency: child safety and exploitation; missing persons; suicide and self-injury scenarios; imminent threats of violence, including terrorism; and natural or man-made disasters such as fires, floods and earthquakes.
Supporting quotations
What types of scenarios would constitute an emergency?
All emergency disclosure requests undergo a case-by-case assessment and each request will be evaluated by our law enforcement response team based on its particular circumstances.
However, the following are some examples that may constitute an emergency:
Cases of child safety and exploitation;
Missing persons;
Suicide and self-injury scenarios;
Imminent threats of violence (including terrorism); or
Natural or man-made disaster situations (such as fires, floods, earthquakes, etc).
Qualifications & exceptions
The examples "may" constitute an emergency; none is stated to qualify automatically.
The assessment is made on each request's particular circumstances.
Not stated here
The FAQ does not say what evidence is needed to treat a scenario as an emergency.
Legal Rights & Agreement Rules · Context
FAQ: authorities in any country can submit requests, but disclosure requirements vary
The FAQ says law enforcement authorities in any country can send a request to TikTok U.S., but the requirements for disclosing data depend on where the user is, where the requesting authority is and, in some cases, the type of data. In certain circumstances TikTok U.S. will tell an authority that a request through the Mutual Legal Assistance Treaty (MLAT) process is necessary to get the data. The Guidelines themselves are described as a reference for requests about U.S.-based users.
Supporting quotations
Does TikTok U.S accept data requests from law enforcement authorities in all countries?
While law enforcement authorities in any country can submit a request to TikTok U.S, the requirements for data disclosure will vary depending on the location of the user, the location of the requesting law enforcement authority and, in certain cases, the type of data requested.
In certain circumstances, TikTok U.S will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data.
These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of U.S.-based users of the TikTok platform (the “Platform”), which is operated by TikTok USDS Joint Venture LLC in the United States (“TikTok U.S.”).
Qualifications & exceptions
Accepting a submission from any country is not the same as agreeing to disclose; disclosure requirements vary with the user's location, the authority's location and sometimes the data type.
Not stated here
The FAQ does not set out the requirements for each country or data type.
Legal Rights & Agreement Rules · Context
FAQ: what a Mutual Legal Assistance Treaty is
The FAQ explains that an MLAT is a treaty between two or more countries that sets out how each will help the others in legal matters such as criminal investigations. Through an MLAT, one country's government can ask another country's government for help getting information from companies located in that other country.
Supporting quotations
What is a Mutual Legal Assistance Treaty (“MLAT”)?
An MLAT is a treaty between two or more countries that defines how each will assist in legal matters, such as in criminal investigations.
Through an MLAT, the government of one country can seek assistance from the government of another country in obtaining information from companies located in the other country.
Qualifications & exceptions
This is a general explanation of the term, not a statement of any particular treaty.
FAQ: MLAT may be needed when the authority is in a different country from the serving entity
The FAQ says MLAT may be needed when the requesting authority is in a different country from the TikTok entity that provides the service to the user (see Section 1, where the entity depends on the user's location). If an authority is unsure whether to use MLAT, it can contact TikTok, and TikTok says it will endeavour to tell the authority whether MLAT is appropriate and to direct it to the designated central authority for MLAT purposes in the appropriate country.
Supporting quotations
In what circumstances may it be necessary for law enforcement authorities to rely on the MLAT process?
It may be necessary in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user
If law enforcement are unclear as to whether they should rely on MLAT, they can contact TikTok.
On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.
This is based on the location of the relevant user.
Qualifications & exceptions
MLAT "may" be necessary; the FAQ does not say it is always necessary in the cross-border situation.
TikTok "will endeavour" to answer, which is not a guarantee of an answer.
Not stated here
The designated central authorities are not named.
Legal Rights & Agreement Rules · Procedure
FAQ: non-law enforcement requests go to other channels
Requests that do not come from law enforcement are directed elsewhere. To report content that may break TikTok's Community Guidelines, the FAQ points to a TikTok help page on how to report content. Reports of alleged copyright or trademark infringement are to be made in line with TikTok's Intellectual Property Policy and can be filed as a Copyright Infringement Report or a Trademark Infringement Report.
Supporting quotations
Where should non-law enforcement requests be sent?
Non-law enforcement requests should be directed as follows:
Report Content: Details of how to report various types of content that may be in breach of TikTok’s Community Guidelines are available
Report IP infringement: Reports of alleged copyright or trademark infringement should be made in accordance with TikTok’s
Only two non-law enforcement routes are listed: content reports and IP infringement reports.
Not stated here
The linked help page, the Community Guidelines and the Intellectual Property Policy are not part of this source, so their content is not covered.
Legal Rights & Agreement Rules · Company practice
FAQ: response times vary; mark time-sensitive requests
TikTok U.S.'s response team says it tries to respond to all requests in a timely way, but response times vary, for example with caseload and the complexity of the request. If a request is time-sensitive, the officer is asked to say so in the request and explain why. Longer response times can be expected when a request does not meet the requirements in the Guidelines and the FAQs.
Supporting quotations
How quickly does TikTok U.S process requests?
TikTok U.S’s dedicated law enforcement response team endeavours to respond to all requests in a timely manner but response times can vary in particular due to the caseload volume at a given time and the complexity of a request.
If a particular request is time-sensitive, we would ask the requesting law enforcement officer to note this in the request (explaining the reasons).
Longer response times can be expected where the request does not meet the requirements set out in our
Qualifications & exceptions
The team "endeavours" to respond in a timely manner; no response time is promised.
Not stated here
No response time target is given.
Legal Rights & Agreement Rules · Procedure
FAQ: follow-up requests after a Cybertip report still must meet the Guidelines
If law enforcement has received a Cybertip report that TikTok U.S. made to NCMEC and now wants more user data for an investigation, the request must still meet the requirements in the Guidelines and the FAQs. To help TikTok U.S. process it more efficiently, the request should include the report number NCMEC assigned to the Cybertip report.
Supporting quotations
What do I do if I receive a Cybertip report made by TikTok U.S to NCMEC?
If law enforcement has received a Cybertip report made by TikTok U.S to NCMEC, and is now requesting further user data in connection with an investigation, the request must meet the requirements set out in our
To help us more efficiently process your request, please specify in your request the report number assigned to the Cybertip report by NCMEC.
Qualifications & exceptions
Including the report number is requested to speed processing; it is worded as "please specify".
Not stated here
The FAQ does not say what data TikTok U.S. included in the original Cybertip report.