These Guidelines are a reference for law enforcement seeking TikTok user data
This document, last updated 6 October 2026, is TikTok’s reference for law enforcement officials who seek data about users of the TikTok platform from the TikTok entities it says are listed in Section 1 (together called TikTok). It points readers to a separate Law Enforcement FAQ for more information; that FAQ appears later in this same text.
Supporting quotations
Last updated: 6 October 2026
These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of users of the TikTok (the “Platform”) from any of the TikTok entities listed in Section 1 below (together “TikTok”).
Not stated here
The list of TikTok entities that Section 1 says follows is not present in the stored text, so which entity serves which users cannot be stated from this source.
Sharing & Disclosure · Company commitment
TikTok says it cooperates with law enforcement while respecting user rights, under internal procedures
TikTok states that, in line with its human rights statement, it is committed to cooperating with law enforcement while respecting users’ privacy, freedom of expression and other rights. Beyond these Guidelines it keeps internal policies and procedures for handling law enforcement requests, which it says are informed by legal and human rights standards and are meant to limit adverse human rights impacts while allowing it to comply with legitimate, valid legal requests from law enforcement (including regulatory authorities, where relevant) to disclose user data. It says it rejects requests that go against those policies and procedures. The internal procedures themselves are not set out here.
Supporting quotations
In line with our [human rights statement](https://www.tiktok.com/safety/en/policies-and-engagement/upholding-human-rights), TikTok is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of its users. To achieve this, in addition to these Guidelines, TikTok has internal policies and procedures governing how TikTok handles and responds to law enforcement requests. These procedures are informed by legal and human rights standards and have been developed in a way that seeks to limit adverse human rights impacts, while enabling TikTok to comply with legitimate, valid legal requests from law enforcement (including regulatory authorities, where relevant) to disclose user data.
We reject requests which go against our policies and procedures.
Qualifications & exceptions
Compliance is described as with legitimate, valid legal requests; requests that go against TikTok’s policies and procedures are rejected.
Not stated here
The linked human rights statement and the internal policies and procedures are not supplied here; what they require is unknown from this source.
Legal Rights & Agreement Rules · Restriction or exception
Requests about TikTok Shop data are directed to separate TikTok Shop guidelines
If a request relates to TikTok Shop data, TikTok directs the requester to its separate TikTok Shop Law Enforcement & Regulatory Disclosure Guidelines rather than this document.
Supporting quotations
If your request relates to TikTok Shop data, please refer to the [TikTok Shop Law Enforcement & Regulatory Disclosure Guidelines](https://www.tiktok.com/safety/en/tools-and-guides/tiktok-shop-law-enforcement-and-regulatory-disclosure-guidelines).
Not stated here
The TikTok Shop guidelines are separately linked and not supplied here; how TikTok Shop data requests are handled is unknown from this source.
Requests must go to the correct TikTok entity for the user’s location; the entity list is missing here
The first basic requirement is that a request be addressed to the correct TikTok entity, which depends on where the relevant user is located. The text says the mapping follows, and marks the entity with an asterisk, but no entity list or footnote appears in the stored text. TikTok warns that a request sent to the wrong entity may not be processed until that is corrected, which may cause delay.
Supporting quotations
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user as follows:
Please note that requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay.
Qualifications & exceptions
A request addressed to the incorrect entity may not be processed until rectified.
Not stated here
The entity-by-location list announced by the words “as follows” and the asterisk footnote are absent from the stored text; the correct entity for any given user cannot be determined from this source.
Legal Rights & Agreement Rules · Restriction or exception
Requests about users located in the United States are referred to a separate U.S. version
For data of users located in the United States, these Guidelines point law enforcement to a separate U.S. version of the TikTok Law Enforcement Guidelines. This document therefore does not itself state the requirements for U.S.-located users.
Supporting quotations
Note: For requests for data of users located in the United States, refer to the U.S. version of the [TikTok Law Enforcement Guidelines](http://usdsjv.tiktok.com/law-enforcement-guidelines).
Not stated here
The U.S. version is separately linked and not supplied here; its requirements are unknown from this source.
Requests must be submitted through TikTok’s webform with PDF attachments
The second basic requirement is that requests be submitted through TikTok’s law enforcement request webform, with any supporting attachments (for example an official warrant, court order or other supporting documentation) in PDF format. Word format is not accepted.
Supporting quotations
Second, requests must be submitted to our webform: [www.tiktok.com/legal/report/lawenforcementrequest](https://www.tiktok.com/legal/report/lawenforcementrequest) with any attachments (for example, official warrant, court order, or other documentation supporting the request) in PDF format (word format will not be accepted).
Qualifications & exceptions
Attachments must be PDF; Word format will not be accepted.
Not stated here
The webform page itself is not supplied here; its fields and any further instructions are unknown.
Legal Rights & Agreement Rules · Restriction or exception
Acknowledging receipt waives no objection, and requests must be in English or translated
A confirmation that TikTok received correspondence is for convenience only and does not waive any right of objection, including objections for lack of jurisdiction, invalid legal process or lack of proper service. All requests and supporting documents (orders, warrants, subpoenas or equivalents) must be provided in English or with a translation.
Supporting quotations
Any confirmation of receipt of correspondence is for convenience only and, in doing so, TikTok does not waive any right of objection (including for lack of jurisdiction, invalid legal process or lack of proper service). All requests to TikTok and any supporting documents (including orders, warrants, and/or subpoenas or equivalent) must be provided in English or with a translation.
Sharing & Disclosure · Restriction or exception
TikTok will not respond to requests from non-law enforcement officials or through informal channels
TikTok states it will not respond to requests for user data that come from people who are not law enforcement officials, or that are sent through informal channels such as personal email addresses.
Supporting quotations
TikTok will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).
Sharing & Disclosure · Company practice
Subscriber information TikTok may hold and disclose on a valid request
TikTok says it may hold subscriber information that can be the subject of a valid law enforcement request: the TikTok username, an email address and phone number (each depending on how the user signed up), the account creation date, the IP address at account creation, and device information. “May hold” does not state that every item exists for every account.
Supporting quotations
TikTok may hold the following user data, which can be the subject of a valid law enforcement request:
Subscriber information
TikTok username
Email address (depending on user’s sign-up method)
Phone number (depending on user’s sign-up method)
Account creation date
IP address at account creation
Device information
Qualifications & exceptions
Email address and phone number are held depending on the user’s sign-up method.
Disclosure is tied to a valid law enforcement request.
Sharing & Disclosure · Company practice
Log-in and log-out IP addresses TikTok may hold
Among the data TikTok says it may hold and that can be requested is log-in / log-out data, namely the IP addresses of account log-ins and log-outs.
Supporting quotations
TikTok may hold the following user data, which can be the subject of a valid law enforcement request:
Log-in / log-out data
IP address of account log-ins/log-outs
Sharing & Disclosure · Company practice
Non-content interaction data: interaction IP logs for a specified period and video creation times
TikTok lists interaction data (non-content) as a category it may hold: IP address logs for interactions, which it says are available for a specified period only, and the time and date a video was created. The length of that period is not stated.
Supporting quotations
TikTok may hold the following user data, which can be the subject of a valid law enforcement request:
Interaction data (non-content)
IP address logs for interactions (for a specified period only)
Video creation time/date
Qualifications & exceptions
Interaction IP logs are available for a specified period only.
Not stated here
The specified period for interaction IP logs is not stated in this source.
Sharing & Disclosure · Company practice
Content data: videos, comments and direct message content
TikTok lists content data it may hold and that can be requested: video content, comments and direct message content. Elsewhere in this section TikTok says content data requests generally require a domestic court or judicial order, warrant or equivalent.
Supporting quotations
TikTok may hold the following user data, which can be the subject of a valid law enforcement request:
Content data
Video content
Comments
Direct message content
This is in particular the case for requests relating to content data (which generally require a domestic court / judicial order, warrant or equivalent).
Qualifications & exceptions
Content data requests generally require a domestic court / judicial order, warrant or equivalent.
Sharing & Disclosure · Company practice
Transaction data: payment information and gifts
TikTok lists transaction data it may hold and that can be requested: payment information, such as debit or credit card information, and gifts received or sent.
Supporting quotations
TikTok may hold the following user data, which can be the subject of a valid law enforcement request:
Transaction data
Payment information, such as debit/credit card information
Gift received/sent
Sharing & Disclosure · Restriction or exception
Requests must name the data type and legal basis; unmet legal requirements mean no disclosure
Each request must clearly specify the type of data sought and the legal basis for requesting it. If a request does not meet the applicable legal requirements for that data, as listed in Section 3 (which requires a signed, dated request on law enforcement letterhead that cites the legal process authorising the request), the data will not be disclosed. This applies in particular to content data, which generally requires a domestic court or judicial order, warrant or equivalent.
Supporting quotations
Each request must clearly specify the type of data requested and the legal basis for requesting it. If the request does not meet the applicable legal requirements for the requested data (as listed in Section 3 below), the data will not be disclosed. This is in particular the case for requests relating to content data (which generally require a domestic court / judicial order, warrant or equivalent).
Each request must be signed, dated, sent on law enforcement letterhead and include the following information:
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Qualifications & exceptions
Content data generally requires a domestic court / judicial order, warrant or equivalent.
The applicable legal requirements are those listed in Section 3 of these Guidelines.
Every request must be signed, dated, on law enforcement letterhead and complete
Each request must be signed, dated and sent on law enforcement letterhead, and must include the information Section 3 lists: details of the requesting authority or court and officer, details of the relevant user account, the data requested with a date range, the legal basis, and whether user notification is permitted.
Supporting quotations
Each request must be signed, dated, sent on law enforcement letterhead and include the following information:
Details of requesting law enforcement authority (or Court):
Details of relevant user account:
Legal basis for the request:
User notification: Please indicate whether user notification is permitted (see Section 4 below).
Legal Rights & Agreement Rules · Procedure
Requests must identify the requesting authority or court and the officer, using an official email domain
The request must give the name and location of the requesting authority; for a court order it should name the court and the judge or magistrate and their location. It must also give the requesting officer’s name, badge or identification number, an email address from an official email domain, and a phone number including any direct-dial extension.
Supporting quotations
Details of requesting law enforcement authority (or Court):
Requesting Authority (or Court): The name and location of the relevant authority. In the case of a Court order, the request should indicate the location and name of the relevant Court and judge / magistrate.
Requesting officer: The requesting officer’s name, badge / identification number, email address (this must be from an official email domain) and phone number (including any direct dial extension).
Qualifications & exceptions
The officer’s email address must be from an official email domain.
Legal Rights & Agreement Rules · Procedure
Requests must identify the account by a TikTok username or an approved identifier
When requesting data about a specific user, the requester must provide a specific TikTok username or one of TikTok’s approved account identifiers: TikTok User ID, TikTok username (account URL or screenshot accepted), phone number, email address, or video ID (video URL or screenshot accepted). TikTok also asks for a screenshot of the account to help it identify the correct account more quickly; that screenshot is requested, not stated as mandatory.
Supporting quotations
Details of relevant user account:
TikTok username: When requesting data regarding a specific user of the Platform, you must provide a specific TikTok username or an approved account identifier associated with the relevant account. We also request that a screenshot of the relevant account be provided (to help us to identify the correct account more quickly). The following are TikTok approved identifiers:
TikTok User ID
TikTok username (account URL or screenshot accepted)
Phone number
Email address
Video ID (video URL or screenshot accepted)
Qualifications & exceptions
A screenshot of the relevant account is requested to speed identification.
Sharing & Disclosure · Restriction or exception
The data sought and a date range must be specified; overly broad requests are refused
The request should clearly specify the scope of the data requested; overly broad requests will be refused. For historic data, the request must give a date (and if possible a time) or a date range relevant to the request.
Supporting quotations
Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.
Date range: The request must specify a date (and, if possible, a time), or a date range as relevant to the request (for historic data only).
Qualifications & exceptions
The date-range requirement is stated for historic data only.
Legal Rights & Agreement Rules · Procedure
Requests must cite the authorising legal process and describe the offence under investigation
The request should cite the legal process that authorises law enforcement to request and collect information for preventing, detecting or investigating criminal offences, by reference to the relevant article or section of an Act, Statute or Code. Separately it should state the type of offence under investigation (again citing the relevant provision), the circumstances of the offence, and how it is connected to the TikTok platform. No particular law is named in this source.
Supporting quotations
Legal basis for the request:
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Context and Offence(s) under investigation: The request should separately indicate the type of offence(s) under investigation (citing the relevant article or section of Act / Statute / Code), the circumstances of the offence and in what way it is connected to the Platform.
Legal Rights & Agreement Rules · Procedure
The request must say whether user notification is permitted; TikTok relies on that indication
Each request must indicate whether notifying the user is permitted, per Section 4. TikTok says it will rely on the requesting law enforcement authority to clearly indicate that its request meets the criteria set out in these Guidelines.
Supporting quotations
User notification: Please indicate whether user notification is permitted (see Section 4 below).
TikTok will rely on the requesting law enforcement authority to clearly indicate that their request has met with the criteria set out in these Law Enforcement Guidelines.
TikTok notifies users of disclosures where required by law, with three exceptions
Where the law requires it, TikTok will notify users when it discloses their data to law enforcement. It may withhold that notice where notice is prohibited under applicable law, would jeopardise an investigation, and/or would put individuals at risk of harm. Notification is therefore not promised in every case: it is tied to a legal requirement and subject to these exceptions.
Supporting quotations
Where required by law, we will notify TikTok users if we disclose their data to law enforcement. We may not provide such notice where it: (a) is prohibited under applicable law; (b) would jeopardize an investigation; and/or (c) would put individuals at risk of harm.
Qualifications & exceptions
Notice is given where required by law, not in every case.
Notice may be withheld if prohibited by law, if it would jeopardise an investigation, or if it would put individuals at risk of harm.
Retention & Deletion · Company commitment
TikTok honours formal preservation requests for 90 days only if they meet the Guidelines’ criteria
TikTok will honour a formal request to preserve user data for 90 days only when the request fulfils the criteria set out above in these Guidelines. Preservation requests go through the same law enforcement webform, with the preservation request attached as a PDF.
Supporting quotations
TikTok will honor formal requests to preserve user data for 90 days only if it fulfils the criteria above. Please submit all preservation requests to our webform: [www.tiktok.com/legal/report/lawenforcementrequest](https://www.tiktok.com/legal/report/lawenforcementrequest) with your preservation request attached in PDF format.
Qualifications & exceptions
Only if the request fulfils the criteria above.
Not stated here
The webform page is not supplied here; its fields and instructions are unknown.
Preservation lasts 90 days, may be extended once by 90 days, then preserved data may be deleted
A preservation request must be on law enforcement letterhead, signed, and must clearly identify the specific user data to be preserved by username, data type and date ranges as in Section 3. TikTok preserves the information for an initial 90-day period and may extend it for one additional 90-day period on receipt of a formal extension request; it says it may not honour multiple extensions beyond that one. If TikTok does not receive formal legal process for the preserved information before the preservation period ends, the preserved information may be deleted when the period expires.
Supporting quotations
Preservation requests must be sent on law enforcement letterhead, signed, and must clearly identify the specific user data to be preserved (by reference to username, the data type and date ranges as per Section 3 above). TikTok will preserve information for an initial 90 day period (and may extend for an additional 90-day period upon receipt of a formal request to extend the preservation). We may not honour multiple extension requests beyond one additional 90-day period. If TikTok does not receive formal legal process for the preserved information before the end of the preservation period, the preserved information may be deleted when the preservation period expires.
Qualifications & exceptions
Extension is for one additional 90-day period on a formal request; multiple extensions beyond that may not be honoured.
Deletion after expiry is stated as a possibility (“may be deleted”), not a certainty.
Sharing & Disclosure · Restriction or exception
Vague preservation requests are not actioned; disclosure of preserved data needs the Section 1 and 3 requirements
Overly broad or unspecific preservation requests will not be actioned. Preservation alone does not produce disclosure: to obtain the preserved data, the requester must meet the requirements of Sections 1 and 3, meaning a request addressed to the correct TikTok entity for the user’s location (U.S.-located users being referred to the separate U.S. version), submitted through the webform in English or with a translation, and signed, dated, on letterhead with the Section 3 contents.
Supporting quotations
Overly broad or unspecific preservation requests will not be actioned. To seek disclosure of preserved data, the requirements set out in Sections 1 and 3 of these Guidelines will apply.
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user as follows:
Note: For requests for data of users located in the United States, refer to the U.S. version of the [TikTok Law Enforcement Guidelines](http://usdsjv.tiktok.com/law-enforcement-guidelines).
Second, requests must be submitted to our webform: [www.tiktok.com/legal/report/lawenforcementrequest](https://www.tiktok.com/legal/report/lawenforcementrequest) with any attachments (for example, official warrant, court order, or other documentation supporting the request) in PDF format (word format will not be accepted).
All requests to TikTok and any supporting documents (including orders, warrants, and/or subpoenas or equivalent) must be provided in English or with a translation.
Each request must be signed, dated, sent on law enforcement letterhead and include the following information:
Qualifications & exceptions
Preservation does not itself authorise disclosure; a separate request meeting Sections 1 and 3 is required.
Not stated here
The U.S. version of the Guidelines and the webform page are separately linked and not supplied here; the entity list Section 1 announces is absent from the stored text.
In an emergency TikTok may disclose data needed to prevent imminent harm, judged case by case
TikTok has processes for emergency requests, which it evaluates case by case. If, as part of an emergency request, it receives information that in its own assessment is sufficient to establish a good-faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, it may provide the user data necessary to prevent that harm, as permitted by applicable law. This is a discretionary disclosure (“may provide”), limited to the data necessary to prevent the harm.
Supporting quotations
TikTok has processes in place to handle emergency requests. Such requests are evaluated on a case-by-case basis: if as part of an emergency request we receive information that is sufficient in our assessment to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Qualifications & exceptions
Disclosure depends on TikTok’s own assessment of a good faith belief in imminent harm or risk of death or serious physical injury.
Limited to user data necessary to prevent that harm, and to what applicable law permits.
Emergency requests go through the webform from a sworn official on an official email domain
Emergency requests must be submitted through TikTok’s law enforcement web form, must be made by a sworn law enforcement official, and, if sent by email, must come from an official law enforcement email domain. People who are not law enforcement and know of an emergency are told to contact local law enforcement directly and immediately rather than TikTok.
Supporting quotations
To request this data, you must submit your request through our web form: [www.tiktok.com/legal/report/lawenforcementrequest](https://www.tiktok.com/legal/report/lawenforcementrequest) All emergency requests must be made by a sworn law enforcement official, and come from an official law enforcement email domain (if sent via email). Non-law enforcement personnel aware of an emergency situation should immediately and directly contact local law enforcement officials.
Not stated here
The web form page is not supplied here; its fields and instructions are unknown.
Legal Rights & Agreement Rules · Procedure
Cross-border requests may need the MLAT process or letters rogatory
A law enforcement authority may need to seek legal assistance through designated government authorities under the Mutual Legal Assistance Treaty (MLAT) framework, or by letters rogatory. TikTok gives as an example the case where the requesting authority is in a different country from the TikTok entity that provides the service to the user whose data is sought, that entity being determined under Section 1 by the user’s location. The FAQ later in this text says more about MLAT. The text says this “may be necessary”; it does not state when MLAT is mandatory.
Supporting quotations
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory. For instance, this may arise in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user whose data is requested (refer to Section 1 above). See our Law Enforcement FAQs for more information in relation to MLAT.
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user as follows:
Qualifications & exceptions
Stated as a possibility (“may be necessary”), illustrated by the cross-border example.
Not stated here
The Section 1 entity-by-location list is absent from the stored text, so which entity serves a given user, and therefore when a request is cross-border, cannot be determined from this source.
Legal Rights & Agreement Rules · Restriction or exception
Requesters must vouch that their information is accurate and the disclosure necessary and proportionate
When submitting a request, law enforcement officials are required to ensure that the information they provide is complete and accurate to the best of their knowledge and good-faith belief, and that the disclosure or other action requested is necessary and proportionate for preventing, detecting or investigating offences, or for preventing an emergency.
Supporting quotations
In submitting a request, law enforcement officials are required to ensure that any information provided is complete and accurate to the best of their knowledge and good faith belief, and that the disclosure (or other action) requested is necessary and proportionate for the purposes of the prevention, detection or investigation of offences, or to prevent an emergency.
Legal Rights & Agreement Rules · Restriction or exception
Law enforcement must handle disclosed data under applicable laws, including data protection law
Once TikTok has disclosed data, the receiving law enforcement authority is required to handle it in accordance with applicable laws, including relevant data protection laws. The source does not name those laws.
Supporting quotations
Once received by law enforcement, the law enforcement authority is required to handle such data in accordance with applicable laws, including relevant data protection laws.
Charges & Financial Obligations · Permission or license
TikTok reserves the right to seek reimbursement of its response costs
TikTok reserves the right to seek reimbursement for the costs of responding to law enforcement requests. This is a reserved right, not a stated fee; no amounts or conditions are given.
Supporting quotations
TikTok reserves the right to seek reimbursement for the costs associated with responding to law enforcement requests.
Not stated here
No amounts, rates or conditions for reimbursement are stated in this source.
Legal Rights & Agreement Rules · Company practice
TikTok may change these Guidelines; updates appear on its website
TikTok may update these Guidelines from time to time. It says changes may be informed by factors including legal or human rights developments and operational or product changes to the platform, and that all relevant updates will be reflected on the TikTok website. No notice period or other notification method is stated.
Supporting quotations
TikTok may update these Guidelines from time to time, and such changes may be informed by a range of factors, including legal or human rights developments, operational and/or product changes to the Platform. All relevant updates will be reflected on the TikTok website.
Not stated here
No notice period or notification method beyond posting on the website is stated.
Legal Rights & Agreement Rules · Context
The FAQ is to be read together with the Guidelines
TikTok’s Law Enforcement FAQ states that it should be read together with the Law Enforcement Guidelines. In this stored text the FAQ follows the Guidelines on the same page, and the link in the FAQ points to that same page.
Supporting quotations
These FAQS should be read together with TikTok’s [Law Enforcement Guidelines](https://www.tiktok.com/safety/en/tools-and-guides/tiktok-law-enforcement-guidelines).
Not stated here
The linked address is this same page; any other version of the Guidelines is not supplied here.
Sharing & Disclosure · Company commitment
A dedicated, trained response team assesses every request case by case before any disclosure
Restating its commitment to cooperate with law enforcement while respecting users’ privacy, freedom of expression and other rights under internal, rights-informed procedures, TikTok says that every request it receives undergoes a case-by-case assessment by its dedicated law enforcement response team before any user data is disclosed. The team is described as trained to evaluate such requests and as regularly conducting outreach to explain TikTok’s disclosure requirements.
Supporting quotations
TikTok is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of our users. To achieve this, in addition to these Guidelines, TikTok has internal policies and procedures governing how TikTok handles and responds to law enforcement requests. These procedures are informed by legal and human rights standards and have been developed in a way that seeks to limit adverse human rights impacts, while enabling TikTok to comply with legitimate, valid legal requests from law enforcement to disclose user data.
All requests received undergo a case-by-case assessment by TikTok’s dedicated law enforcement response team before any user data is disclosed. This team is trained to evaluate requests from law enforcement authorities and frequently engages in outreach to communicate TikTok’s requirements for disclosing user data to law enforcement authorities.
Not stated here
The internal policies and procedures are not supplied here; what the assessment examines is unknown beyond the requirements stated in this text.
Sharing & Disclosure · Company commitment
Disclosure requirements are those in Sections 1 and 3, grounded in local law and human-rights commitments
TikTok says its requirements for disclosing user data to law enforcement are set out in the Guidelines, particularly Sections 1 (addressing the correct entity) and 3 (the signed, dated, letterhead request with its listed contents). It describes these as reflecting its internal policies and procedures, applicable legal requirements and its commitment to international human rights including the International Bill of Human Rights. Because laws differ by country, it says the rules on when data can legally be disclosed also vary to some extent, while its global commitments to freedom of expression and privacy remain.
Supporting quotations
TikTok’s requirements for disclosing user data to law enforcement authorities are clearly set out in our [Law Enforcement Guidelines](https://www.tiktok.com/safety/en/tools-and-guides/tiktok-law-enforcement-guidelines) (in particular see Sections 1 and 3). These requirements reflect our internal policies and procedures for handling requests from law enforcement authorities, and are based on applicable legal requirements and our commitment to international human rights, including the International Bill of Human Rights. Because the applicable laws vary from one country to another, the rules on when data can legally be disclosed will also vary to some extent and our internal policies and procedures reflect this while at the same time reflecting our global commitments to freedom of expression and privacy.
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user as follows:
Each request must be signed, dated, sent on law enforcement letterhead and include the following information:
Qualifications & exceptions
Disclosure rules vary to some extent by country because applicable laws vary.
Not stated here
The International Bill of Human Rights and the internal policies are external to this source and not supplied here; the Section 1 entity list is absent from the stored text.
Account & Service Control · Procedure
Where to find a TikTok username
A TikTok username appears on the user’s profile page below the profile photo, shown in the form @xxxxxx.
Supporting quotations
A TikTok username can be found on a user's profile page, below their profile photo, shown as @xxxxxx.
Sharing & Disclosure · Restriction or exception
TikTok may reject requests that miss its requirements, most commonly for four reasons
TikTok may reject law enforcement data requests that do not meet the Guidelines’ requirements. The most common examples it gives are requests not addressed to the correct TikTok entity; requests that do not specify the legal process authorising the request; requests that do not state the type of offence under investigation, its circumstances and its connection to TikTok; and overly broad requests, such as for “all user data” or with no date range.
Supporting quotations
TikTok may reject data requests from law enforcement authorities where they do not meet the requirements that are clearly set out in our Law Enforcement Guidelines. The most common examples are as follows:
Requests that are not addressed to the correct TikTok entity;
Requests that do not specify the legal process which authorizes law enforcement to request and collect information;
Requests that do not indicate the type of offence(s) under investigation, the circumstances of the offence(s) and in what way it/they are connected to TikTok; and
Overly broad requests for “all user data” or where there are no date ranges indicated.
Besides rejecting, TikTok may narrow requests, ask for more information or require MLAT
In accordance with applicable law, and apart from rejecting non-compliant requests, TikTok says it will seek to narrow the scope of requests (by volume of data, number of users and/or time period), ask for further supporting information (particularly the legal process and the offence type), or tell the requesting authority that a request through the Mutual Legal Assistance Treaty (MLAT) process is necessary to obtain the data.
Supporting quotations
Aside from rejecting requests from law enforcement authorities that are not made in accordance with the relevant legal processes and requirements, TikTok will in accordance with applicable law:
Seek to narrow the scope of data requests in terms of the volume of data requested, the number of users they relate to and/or the time period to which they relate;
Ask for further information in support of the request (in particular, for details of the relevant legal process and/or the type of offence(s) under investigation); or
Communicate to the requesting law enforcement authorities that a request via the Mutual Legal Assistance Treaty (“MLAT”) process is necessary to obtain disclosure of the requested data.
Qualifications & exceptions
Each measure is stated as taken in accordance with applicable law.
Security & Safeguards · Permission or license
TikTok may report fraudulent attempts to obtain user data to the authorities
TikTok says it may report any fraudulent attempt to obtain user data information to the relevant authorities.
Supporting quotations
TikTok may report any fraudulent attempts to obtain user data information to relevant authorities.
Sharing & Disclosure · Permission or license
In an emergency TikTok may disclose data without formal legal process; the FAQ cites Section 5
The FAQ says TikTok may disclose user data without a formal legal request based on valid legal process in emergency circumstances: where it is satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, it may provide the user data necessary to prevent that harm, as permitted by applicable law. The FAQ attributes this to Section 5 of the Guidelines; in this stored text the emergency-request rule appears under the heading numbered 6, while Section 5 covers preservation requests. The Section 6 text contains the matching rule and is anchored here.
Supporting quotations
TikTok may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:
Emergency circumstances: As explained in Section 5 of our Law Enforcement Guidelines, where satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
TikTok has processes in place to handle emergency requests. Such requests are evaluated on a case-by-case basis: if as part of an emergency request we receive information that is sufficient in our assessment to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Qualifications & exceptions
Disclosure is discretionary (“may provide”), limited to data necessary to prevent the harm, and subject to applicable law.
Not stated here
Whether the FAQ’s “Section 5” citation is a numbering error or refers to a different numbering of the Guidelines cannot be determined from this source; the substantive rule matches the section numbered 6 here.
TikTok proactively reports some user data where legally obliged, such as to NCMEC
Outside formal legal requests, TikTok says that in limited circumstances, including where it is under legal obligations, it reports certain user data to law enforcement authorities or designated bodies. Its examples are reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (NCMEC) for child-safeguarding purposes and reporting suspicious financial transactions to relevant authorities.
Supporting quotations
TikTok may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:
Proactive reports obligations: In limited circumstances, including where TikTok is subject to legal obligations, TikTok reports certain user data either to law enforcement authorities or to designated bodies. Examples include reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (“NCMEC”) for child safeguarding purposes and reporting suspicious financial transactions to relevant authorities.
Qualifications & exceptions
Described as limited circumstances, including where TikTok is subject to legal obligations.
Not stated here
Which data is reported and under which legal obligations is not stated in this source.
All emergency disclosure requests are assessed case by case by the response team on their particular circumstances. TikTok lists examples that may constitute an emergency: child safety and exploitation cases, missing persons, suicide and self-injury scenarios, imminent threats of violence including terrorism, and natural or man-made disasters such as fires, floods or earthquakes. The list is illustrative (“some examples that may constitute an emergency”), not a closed definition.
Supporting quotations
All emergency disclosure requests undergo a case-by-case assessment and each request will be evaluated by our law enforcement response team based on its particular circumstances. However, the following are some examples that may constitute an emergency:
Cases of child safety and exploitation;
Missing persons;
Suicide and self-injury scenarios;
Imminent threats of violence (including terrorism); or
Natural or man-made disaster situations (such as fires, floods, earthquakes, etc).
Qualifications & exceptions
Examples only; each request is still evaluated on its own circumstances.
Sharing & Disclosure · Company practice
Any country’s authorities may ask, but disclosure rules depend on user, requester location and data type
Law enforcement authorities in any country can submit a request to TikTok, but the requirements for disclosure vary with the location of the user, the location of the requesting authority and, in some cases, the type of data requested. In certain circumstances TikTok will tell an authority that a request through the Mutual Legal Assistance Treaty (MLAT) process is necessary to obtain the data. TikTok says it publishes Transparency Reports with the number of requests received from each country.
Supporting quotations
While law enforcement authorities in any country can submit a request to TikTok, the requirements for data disclosure will vary depending on the location of the user, the location of the requesting law enforcement authority and, in certain cases, the type of data requested. In certain circumstances, TikTok will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data. TikTok publishes Transparency Reports with information on the number of requests received from each country.
Qualifications & exceptions
Requirements vary by user location, requester location and, in certain cases, data type.
Not stated here
The Transparency Reports are not supplied here; their contents are unknown from this source.
Legal Rights & Agreement Rules · Context
What a Mutual Legal Assistance Treaty (MLAT) is
TikTok describes an MLAT as a treaty between two or more countries defining how each will assist in legal matters such as criminal investigations; through it, one country’s government can seek another government’s help in obtaining information from companies located in that other country.
Supporting quotations
An MLAT is a treaty between two or more countries that defines how each will assist in legal matters, such as in criminal investigations. Through an MLAT, the government of one country can seek assistance from the government of another country in obtaining information from companies located in the other country.
Legal Rights & Agreement Rules · Procedure
MLAT may be needed when the requester and the serving TikTok entity are in different countries
The FAQ says MLAT may be necessary where the requesting law enforcement authority is in a different country from the TikTok entity that provides the service to the relevant user, which Section 1 ties to the user’s location. Authorities unsure whether MLAT applies can contact TikTok, which says it will endeavour to tell them whether MLAT is appropriate and to direct them to the designated central authority for MLAT purposes in the appropriate country.
Supporting quotations
It may be necessary in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user (see Section 1 of our Law Enforcement Guidelines). If law enforcement are unclear as to whether they should rely on MLAT, they can contact TikTok. On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user as follows:
Qualifications & exceptions
TikTok’s guidance on MLAT is an endeavour, not a guarantee.
Not stated here
The Section 1 entity-by-location list is absent from the stored text, so which entity serves a given user cannot be determined from this source.
Legal Rights & Agreement Rules · Procedure
Non-law-enforcement requests go to content reporting or intellectual property channels, not this process
Requests that are not from law enforcement are directed elsewhere: content that may breach TikTok’s Community Guidelines is reported through TikTok’s support pages, and alleged copyright or trademark infringement is reported under TikTok’s Intellectual Property Policy through a Copyright Infringement Report or a Trademark Infringement Report.
Supporting quotations
Non-law enforcement requests should be directed as follows:
Report Content: Details of how to report various types of content that may be in breach of TikTok’s Community Guidelines are available [here](https://www.tiktok.com/support/faq_detail?category=web_using_tiktok).
Report IP infringement: Reports of alleged copyright or trademark infringement should be made in accordance with TikTok’s [Intellectual Property Policy](https://www.tiktok.com/legal/copyright-policy) and can be filed as a [Copyright Infringement Report](https://www.tiktok.com/legal/report/Copyright) or as a [Trademark Infringement Report](https://www.tiktok.com/legal/report/Trademark).
Not stated here
The Community Guidelines, support page, Intellectual Property Policy and the two report forms are separately linked and not supplied here; their contents and requirements are unknown from this source.
Legal Rights & Agreement Rules · Company practice
Response times vary; flag time-sensitive requests, and non-compliant requests take longer
TikTok’s law enforcement response team says it tries to answer all requests in a timely manner, but response times vary with caseload and the complexity of a request. A time-sensitive request should say so, with reasons, in the request itself. Longer response times can be expected where a request does not meet the requirements in the Guidelines and the FAQ. No fixed response time is stated.
Supporting quotations
TikTok’s dedicated law enforcement response team endeavours to respond to all requests in a timely manner but response times can vary in particular due to the caseload volume at a given time and the complexity of a request. If a particular request is time-sensitive, we would ask the requesting law enforcement officer to note this in the request (explaining the reasons). Longer response times can be expected where the request does not meet the requirements set out in our [Law Enforcement Guidelines](https://www.tiktok.com/safety/en/tools-and-guides/tiktok-law-enforcement-guidelines) and these Law Enforcement FAQS.
Qualifications & exceptions
Longer response times can be expected for requests that do not meet the stated requirements.
Not stated here
No response-time commitment or deadline is given in this source.
The linked Guidelines address is this same page; any other version of the Guidelines is not supplied here.
Sharing & Disclosure · Procedure
Follow-up requests after a TikTok Cybertip to NCMEC must still meet the Guidelines; quote the report number
If law enforcement has received a Cybertip report that TikTok made to NCMEC and now wants further user data for an investigation, that request must meet the requirements in the Guidelines and the FAQ like any other. TikTok asks that the request state the report number NCMEC assigned to the Cybertip so it can process it more efficiently.
Supporting quotations
If law enforcement has received a Cybertip report made by TikTok to NCMEC, and is now requesting further user data in connection with an investigation, the request must meet the requirements set out in our [Law Enforcement Guidelines](https://www.tiktok.com/safety/en/tools-and-guides/tiktok-law-enforcement-guidelines) and these Law Enforcement FAQS. To help us more efficiently process your request, please specify in your request the report number assigned to the Cybertip report by NCMEC.
Not stated here
The linked Guidelines address is this same page; any other version of the Guidelines is not supplied here.