Law Enforcement Guidelines

Data Access & Collection · Company practice

Subscriber, log-in and interaction data TikTok U.S. may hold

TikTok U.S. lists the user data it may hold that can be the subject of a valid law enforcement request. The first groups are: subscriber information (TikTok username, email address and phone number depending on the user's sign-up method, account creation date, IP address at account creation, and device information); log-in and log-out data (the IP address of account log-ins and log-outs); and interaction data that is not content (IP address logs for interactions, for a specified period only, and video creation time and date). The wording is "may hold": the list says what could be requested, not that every item exists for every user or will be handed over.

Supporting quotations

TikTok U.S. may hold the following user data, which can be the subject of a valid law enforcement request:

Subscriber information

TikTok username

Email address (depending on user’s sign-up method)

Phone number (depending on user’s sign-up method)

Account creation date

IP address at account creation

Device information

Log-in / log-out data

IP address of account log-ins/log-outs

Interaction data (non-content)

IP address logs for interactions (for a specified period only)

Video creation time/date

Qualifications & exceptions

• Email address and phone number are held depending on the user's sign-up method.
• IP address logs for interactions are kept "for a specified period only".
• Being listed does not mean TikTok U.S. will disclose the item; each request must also meet the legal requirements.

Not stated here

• The period for interaction IP address logs is not given.
• "Device information" is not broken down into specific fields.

Data Access & Collection · Company practice

Content and transaction data TikTok U.S. may hold

The list of data TikTok U.S. may hold also includes content data (video content, comments and direct message content) and transaction data (payment information, such as debit or credit card information, and gifts received or sent). As with the other categories, the document says TikTok U.S. "may hold" this data and that it can be the subject of a valid law enforcement request. The paragraph after the list says requests for content data generally need a domestic court or judicial order, warrant or equivalent.

Supporting quotations

TikTok U.S. may hold the following user data, which can be the subject of a valid law enforcement request:

Content data

Video content

Comments

Direct message content

Transaction data

Payment information, such as debit/credit card information

Gift received/sent

Qualifications & exceptions

• "Such as" in the payment information item means the examples are not a complete list.
• Listing an item does not mean TikTok U.S. will disclose it; content data generally needs a court order, warrant or equivalent.

Not stated here

• The document does not say how long content or transaction data is kept.