Law Enforcement Data Request Guidelines

Legal Rights & Agreement Rules · Context

Guidelines tell law enforcement how to request TikTok user data

This page is addressed to law enforcement officials who want data about users of the TikTok platform. It says the requests go to "any of the TikTok entities listed in Section 1" and calls those entities together "TikTok". The page shows "Last updated: 6 October 2026"; no separate effective date is given. It also says that requests about TikTok Shop data should instead follow a separate set of Shop guidelines, which are linked but not part of this document.

Supporting quotations

Last updated: 6 October 2026

These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of users of the TikTok (the “Platform”) from any of the TikTok entities listed in Section 1 below (together “TikTok”).

If your request relates to TikTok Shop data, please refer to the

Qualifications & exceptions

• Written for law enforcement officials, not for ordinary users making their own requests.
• Requests about TikTok Shop data are sent to separate Shop guidelines instead.
• The page states a last-updated date, not a separate effective date.

Not stated here

• Section 1 refers to a list of TikTok entities but the supplied text contains no such list (a publisher omission; the list is not imported from elsewhere).
• The linked TikTok Shop guidelines are not part of the supplied text, so their rules are unknown.

Legal Rights & Agreement Rules · Company commitment

TikTok says it cooperates with law enforcement while respecting user rights

TikTok states that it is committed to cooperating with law enforcement while respecting users' privacy, freedom of expression and other rights. It says it has internal policies and procedures, in addition to these Guidelines, that govern how it handles and responds to law enforcement requests. Those procedures are described as informed by legal and human rights standards and as seeking to limit adverse human rights impacts while enabling TikTok to comply with legitimate, valid legal requests from law enforcement, including regulatory authorities where relevant.

Supporting quotations

TikTok is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of its users.

in addition to these Guidelines, TikTok has internal policies and procedures governing how TikTok handles and responds to law enforcement requests.

These procedures are informed by legal and human rights standards and have been developed in a way that seeks to limit adverse human rights impacts, while enabling TikTok to comply with legitimate, valid legal requests from law enforcement (including regulatory authorities, where relevant) to disclose user data.

Qualifications & exceptions

• The procedures "seek to" limit adverse human rights impacts; this describes an aim, not a guaranteed result.
• Compliance is described as being with "legitimate, valid legal requests".
• Regulatory authorities are included only "where relevant".

Not stated here

• The internal policies and procedures are not set out in this document.
• The linked human rights statement is not part of the supplied text.

Legal Rights & Agreement Rules · Restriction or exception

TikTok rejects requests that go against its policies and procedures

The introduction ends by saying TikTok rejects requests which go against its policies and procedures. The sentence does not say which policies or procedures it means; the Guidelines on this page are one part, and TikTok separately refers to internal policies it does not publish here.

Supporting quotations

We reject requests which go against our policies and procedures.

Qualifications & exceptions

• The rejection standard is tied to TikTok's "policies and procedures", which include internal ones not set out here.

Not stated here

• Which specific policies or procedures can lead to a rejection, beyond the requirements stated on this page, is not stated.

Legal Rights & Agreement Rules · Procedure

Requests must go to the TikTok entity that matches the user's location

Section 1 says a request must first be addressed to the correct TikTok entity, chosen by where the relevant user is located. The text introduces this with "as follows:" and marks "entity" with an asterisk, but no list of entities and no explanation of the asterisk follows in the supplied text. A request sent to the wrong entity may not be processed until it is corrected, which may cause delay.

Supporting quotations

First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user as follows:

Please note that requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay.

Qualifications & exceptions

• The entity is chosen by the location of the relevant user, not of the requesting authority.
• A wrong-entity request "may not" be processed until rectified; processing is not stated to be ruled out.

Not stated here

• Which TikTok entity applies to which location is not given: the page promises a list ("as follows:") and an asterisk note, and neither follows. The publisher omission is not filled from other sources.

Legal Rights & Agreement Rules · Restriction or exception

Requests for U.S.-located users' data point to a separate U.S. version

A note in Section 1 tells requesters that for data of users located in the United States they should refer to the U.S. version of the TikTok Law Enforcement Guidelines, a separately linked page. This page does not say whether any other part of its own rules still applies to those requests.

Supporting quotations

Note: For requests for data of users located in the United States, refer to the U.S. version of the

Qualifications & exceptions

• Applies to users located in the United States (the user's location), not to the requester's location.

Not stated here

• The U.S. version is a separate linked page and is not part of the supplied text, so what it requires is unknown.
• Whether any rule on this page also applies to requests about U.S.-located users is not stated.

Legal Rights & Agreement Rules · Procedure

Requests go through TikTok's web form, with attachments in PDF

Second, Section 1 requires requests to be submitted through TikTok's web form. Any attachments, such as a warrant, court order or other supporting documents, must be PDF files; Word files will not be accepted.

Supporting quotations

Second, requests must be submitted to our webform:

with any attachments (for example, official warrant, court order, or other documentation supporting the request) in PDF format (word format will not be accepted).

Qualifications & exceptions

• Attachments must be PDF; Word format is stated not to be accepted.

Legal Rights & Agreement Rules · Restriction or exception

A confirmation of receipt does not waive TikTok's right to object

If TikTok confirms that it received correspondence, the confirmation is only a courtesy. TikTok says it does not give up any right of objection by confirming, including objections for lack of jurisdiction, invalid legal process or lack of proper service. A requester therefore cannot treat an acknowledgement as acceptance of the request.

Supporting quotations

Any confirmation of receipt of correspondence is for convenience only and, in doing so, TikTok does not waive any right of objection (including for lack of jurisdiction, invalid legal process or lack of proper service).

Qualifications & exceptions

• The three objections named are examples ("including"); other objections are not excluded.

Not stated here

• Which other objections TikTok may reserve is not stated.

Legal Rights & Agreement Rules · Procedure

Requests and supporting documents must be in English or translated

All requests to TikTok, and any supporting documents such as orders, warrants or subpoenas (or equivalents), must be provided in English or accompanied by a translation.

Supporting quotations

All requests to TikTok and any supporting documents (including orders, warrants, and/or subpoenas or equivalent) must be provided in English or with a translation.

Not stated here

• Whether the translation must be certified or sworn is not stated.

Legal Rights & Agreement Rules · Restriction or exception

TikTok will not answer requests from non-law-enforcement senders or informal channels

TikTok says it will not respond to requests for user data sent by people who are not law enforcement officials, or sent through informal channels, with personal email addresses given as an example. The route described on this page is the web form in Section 1.

Supporting quotations

TikTok will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).

Qualifications & exceptions

• Personal email addresses are an example of an informal channel, so other informal channels are also covered.

Not stated here

• Other examples of informal channels are not listed.

Data Access & Collection · Company practice

TikTok lists five categories of user data that a valid request can cover

Section 2 says TikTok may hold the user data listed under five headings: subscriber information, log-in and log-out data, interaction data (non-content), content data and transaction data. These are the categories that can be the subject of a valid law enforcement request. "May hold" does not mean TikTok holds every item for every user, and being listed does not mean it will be disclosed: each request must still meet the legal requirements for the data asked for.

Supporting quotations

TikTok may hold the following user data, which can be the subject of a valid law enforcement request:

Subscriber information

Log-in / log-out data

Interaction data (non-content)

Content data

Transaction data

Qualifications & exceptions

• Only data that TikTok "may hold" and that is the subject of a "valid" request.
• Disclosure depends on the request meeting the applicable legal requirements.

Not stated here

• The document does not say whether the list is exhaustive.

Data Access & Collection · Company practice

Subscriber information includes username, contact details, sign-up IP and device information

Under subscriber information TikTok lists the TikTok username, email address, phone number, account creation date, the IP address at account creation and device information. Email address and phone number are listed "depending on user's sign-up method", so they exist only for accounts that signed up that way.

Supporting quotations

TikTok username

Email address (depending on user’s sign-up method)

Phone number (depending on user’s sign-up method)

Account creation date

IP address at account creation

Device information

Qualifications & exceptions

• Email address and phone number depend on the user's sign-up method.

Not stated here

• What "Device information" covers is not defined.

Data Access & Collection · Company practice

Log-in IP addresses, interaction IP logs and video creation times are listed

TikTok lists the IP address of account log-ins and log-outs as one category, and under interaction data (non-content) it lists IP address logs for interactions "for a specified period only" and the time and date a video was created. The period for the interaction IP logs is not given.

Supporting quotations

IP address of account log-ins/log-outs

IP address logs for interactions (for a specified period only)

Video creation time/date

Qualifications & exceptions

• Interaction IP logs are available only "for a specified period".

Not stated here

• The length of the specified period is not stated.
• What counts as an "interaction" is not defined.
• Whether log-in and log-out IP data are limited to a period is not stated.

Sharing & Disclosure · Restriction or exception

Videos, comments and direct messages are content data that generally need a court order or warrant

Content data includes video content, comments and the content of direct messages. TikTok says a request that does not meet the applicable legal requirements will not lead to disclosure, and that this is in particular the case for content data, which "generally" requires a domestic court or judicial order, a warrant or an equivalent. The words "generally" and "domestic" are not explained.

Supporting quotations

Video content

Comments

Direct message content

This is in particular the case for requests relating to content data (which generally require a domestic court / judicial order, warrant or equivalent).

Qualifications & exceptions

• Content data "generally" requires a court or judicial order, warrant or equivalent; the exceptions are not stated.
• The order is described as "domestic".

Not stated here

• What "domestic" refers to (the requester's country, the TikTok entity's country or another) is not stated.
• Cases in which content data could be disclosed without such an order are not described in this section.

Cross-references

• qualifies (model-proposed): A request must name the data type and legal basis or the data will not be disclosed — The content data sentence adds a stricter, data-type-specific condition (generally a domestic court or judicial order, warrant or equivalent) to the general rule that requests must meet the applicable legal requirements.

Charges & Financial Obligations · Company practice

Transaction data includes payment card information and gifts sent or received

Transaction data is listed as payment information, with debit or credit card information given as an example, and gifts received or sent. "Such as" marks the card information as an example, not the full list of payment details.

Supporting quotations

Payment information, such as debit/credit card information

Gift received/sent

Qualifications & exceptions

• Debit/credit card information is an example of payment information ("such as").

Not stated here

• Which payment details are held, and what "Gift" covers, is not defined.

Legal Rights & Agreement Rules · Restriction or exception

A request must name the data type and legal basis or the data will not be disclosed

Each request must clearly say what type of data it wants and the legal basis for asking. If the request does not meet the applicable legal requirements for that data, "as listed in Section 3", the data will not be disclosed. Section 3 sets out what a request must contain, including the scope of data and date range, the legal process relied on and the offence under investigation. The supplied Section 3 does not give a separate legal standard for each data type; the only data-type rule stated in Section 2 concerns content data.

Supporting quotations

Each request must clearly specify the type of data requested and the legal basis for requesting it. If the request does not meet the applicable legal requirements for the requested data (as listed in Section 3 below), the data will not be disclosed.

3. Requirements when making a request

Each request must be signed, dated, sent on law enforcement letterhead and include the following information:

Data requested: The request should clearly specify the scope of the data requested.

Date range: The request must specify a date (and, if possible, a time), or a date range as relevant to the request (for historic data only).

Legal basis for the request:

Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.

Context and Offence(s) under investigation: The request should separately indicate the type of offence(s) under investigation

Qualifications & exceptions

• Applies to every request; disclosure is refused where the applicable legal requirements are not met.

Not stated here

• Which legal process is required for data types other than content data is not stated.
• Section 3 is the reference for the "legal requirements", but it lists what a request must contain, so the level of legal authority needed for each data type is not spelled out beyond the content data sentence.

Cross-references

• refers to (model-proposed): A request should cite the legal process and describe the offence under investigation — The Section 2 rule points to Section 3 for the legal requirements; Section 3 sets out the legal process and offence details a request should give.
• qualified by (model-proposed): Videos, comments and direct messages are content data that generally need a court order or warrant — The content data sentence adds a stricter, data-type-specific condition (generally a domestic court or judicial order, warrant or equivalent) to the general rule that requests must meet the applicable legal requirements.

Legal Rights & Agreement Rules · Procedure

Every request must be signed, dated and sent on law enforcement letterhead

Section 3 says each request must be signed, dated and sent on law enforcement letterhead, and must include the information listed in the rest of the section: the requesting authority and officer, the user account, the data and date range wanted, and the legal basis.

Supporting quotations

Each request must be signed, dated, sent on law enforcement letterhead and include the following information:

Qualifications & exceptions

• Applies to each request, in addition to the web form, language and channel rules in Section 1.

Not stated here

• What counts as acceptable "law enforcement letterhead" for a court order or electronic submission is not described.

Legal Rights & Agreement Rules · Procedure

A request must identify the requesting authority and the officer

The request must give the name and location of the requesting authority; for a court order, it should give the court's location and name and the judge or magistrate. It must also give the requesting officer's name, badge or identification number, email address (which must be from an official email domain) and phone number, including any direct-dial extension.

Supporting quotations

Details of requesting law enforcement authority (or Court):

Requesting Authority (or Court): The name and location of the relevant authority. In the case of a Court order, the request should indicate the location and name of the relevant Court and judge / magistrate.

Requesting officer: The requesting officer’s name, badge / identification number, email address (this must be from an official email domain) and phone number (including any direct dial extension).

Qualifications & exceptions

• Court and judge details are what the request "should" indicate when it is a court order; the officer's email "must" be from an official domain.

Not stated here

• What counts as an "official email domain" is not defined.

Legal Rights & Agreement Rules · Procedure

A request about a specific user must give an approved account identifier

When asking for data about a specific user, the request must give a specific TikTok username or another approved account identifier for that account. TikTok also asks for a screenshot of the account to help it find the right account faster. The approved identifiers listed are the TikTok User ID, the TikTok username (an account URL or screenshot is accepted), a phone number, an email address, and a Video ID (a video URL or screenshot is accepted).

Supporting quotations

Details of relevant user account:

When requesting data regarding a specific user of the Platform, you must provide a specific TikTok username or an approved account identifier associated with the relevant account.

We also request that a screenshot of the relevant account be provided (to help us to identify the correct account more quickly).

TikTok User ID

TikTok username (account URL or screenshot accepted)

Phone number

Email address

Video ID (video URL or screenshot accepted)

Qualifications & exceptions

• The identifier requirement applies when the request is about a specific user.
• The screenshot is requested ("We also request"), not stated as a condition.

Not stated here

• The document does not say what happens to a request that uses none of the listed identifiers beyond the general power to refuse requests that do not meet the requirements.

Legal Rights & Agreement Rules · Restriction or exception

A request must state the scope and date range; overly broad requests are refused

The request should clearly state the scope of the data wanted, and TikTok says overly broad requests will be refused. It must also give a date, with a time if possible, or a date range "as relevant to the request (for historic data only)". The bracketed phrase is not explained, so it is unclear whether it limits when a date range is needed or what kind of data it applies to.

Supporting quotations

Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.

Date range: The request must specify a date (and, if possible, a time), or a date range as relevant to the request (for historic data only).

Qualifications & exceptions

• "Should" is used for the scope statement while "will be refused" applies to overly broad requests.
• The date or date range is "as relevant to the request (for historic data only)".

Not stated here

• What counts as "overly broad" is not defined.
• What the words "(for historic data only)" restrict is not explained.

Cross-references

• contrast (model-proposed): TikTok may reject requests that do not meet the requirements, with four common examples — The Guidelines say overly broad requests "will be refused", while the FAQ says TikTok "may reject" requests that do not meet the requirements and lists overly broad requests as a common example. The wording differs in strength; the document does not reconcile them.

Legal Rights & Agreement Rules · Procedure

A request should cite the legal process and describe the offence under investigation

Under "Legal basis for the request" the request should name the legal process, citing the article or section of the Act, statute or code that authorizes law enforcement to ask for and collect information to prevent, detect or investigate criminal offences. It should also separately state the type of offence under investigation (again citing the article or section), the circumstances of the offence and how it connects to the platform. Section 2 points to Section 3 for the legal requirements a request must meet.

Supporting quotations

Legal basis for the request:

Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.

Context and Offence(s) under investigation: The request should separately indicate the type of offence(s) under investigation (citing the relevant article or section of Act / Statute / Code), the circumstances of the offence and in what way it is connected to the Platform.

Each request must clearly specify the type of data requested and the legal basis for requesting it.

Qualifications & exceptions

• The text uses "should" for these items; elsewhere requests lacking them may be rejected (see the FAQ).

Not stated here

• Which legal process is acceptable for which data type is not stated in this section.

Cross-references

• referred to by (model-proposed): A request must name the data type and legal basis or the data will not be disclosed — The Section 2 rule points to Section 3 for the legal requirements; Section 3 sets out the legal process and offence details a request should give.

Legal Rights & Agreement Rules · Company commitment

TikTok notifies users of disclosures only where the law requires, with three exceptions

Section 4 says that where required by law, TikTok will notify users if it discloses their data to law enforcement. It may not give notice where notice is prohibited by applicable law, would jeopardize an investigation, or would put individuals at risk of harm. The request itself should say whether user notification is permitted. TikTok does not promise to notify users in cases where no law requires it.

Supporting quotations

User notification: Please indicate whether user notification is permitted

Where required by law, we will notify TikTok users if we disclose their data to law enforcement.

We may not provide such notice where it: (a) is prohibited under applicable law; (b) would jeopardize an investigation; and/or (c) would put individuals at risk of harm.

Qualifications & exceptions

• The commitment applies only "where required by law".
• Notice "may" be withheld if prohibited by law, if it would jeopardize an investigation, or if it would put individuals at risk of harm.

Not stated here

• Which laws require notice is not stated.
• Whether notice is given later once an exception no longer applies is not stated.
• When and how a user would be told is not described.

Legal Rights & Agreement Rules · Company practice

TikTok relies on the requesting authority to indicate that its request meets the criteria

At the end of Section 4 TikTok says it will rely on the requesting authority to clearly indicate that its request has met the criteria in these Guidelines. The sentence sits after the notification text, and it does not say which criteria it means (the notification exceptions or the Guidelines' requirements generally), so how far it limits what TikTok checks is unclear.

Supporting quotations

TikTok will rely on the requesting law enforcement authority to clearly indicate that their request has met with the criteria set out in these Law Enforcement Guidelines.

Qualifications & exceptions

• The sentence follows the user-notification text.

Not stated here

• Whether "the criteria" means the notification exceptions or all Guidelines requirements is not stated.
• The document does not say whether TikTok also checks the authority's indication.

Retention & Deletion · Company practice

TikTok will preserve user data for 90 days on a formal request that meets the criteria

Section 5 says TikTok will honor formal requests to preserve user data for 90 days, but only if the request fulfils "the criteria above". Preservation requests go through the same web form with the request attached as a PDF. They must be on law enforcement letterhead, signed, and clearly identify the specific data to preserve by username, data type and date range. Overly broad or unspecific preservation requests will not be actioned.

Supporting quotations

TikTok will honor formal requests to preserve user data for 90 days only if it fulfils the criteria above.

with your preservation request attached in PDF format.

Preservation requests must be sent on law enforcement letterhead, signed, and must clearly identify the specific user data to be preserved (by reference to username, the data type and date ranges as per Section 3 above).

Overly broad or unspecific preservation requests will not be actioned.

Qualifications & exceptions

• Honored only if the request fulfils "the criteria above".
• The request must identify the specific data by username, data type and date range.

Not stated here

• "The criteria above" is not specified further.
• Whether preserved data is a copy kept apart from ordinary retention is not stated.

Cross-references

• qualified by (model-proposed): Preservation lasts an initial 90 days, may be extended once, and then data may be deleted — The initial 90-day preservation is limited by the one-extension cap and by possible deletion at expiry.

Retention & Deletion · Company practice

Preservation lasts an initial 90 days, may be extended once, and then data may be deleted

TikTok preserves information for an initial 90 days and may extend for one more 90-day period on receipt of a formal request to extend. It says it may not honor multiple extension requests beyond one additional 90-day period. If TikTok has not received formal legal process for the preserved information by the end of the preservation period, the preserved information may be deleted when the period expires.

Supporting quotations

TikTok will preserve information for an initial 90 day period (and may extend for an additional 90-day period upon receipt of a formal request to extend the preservation).

We may not honour multiple extension requests beyond one additional 90-day period.

If TikTok does not receive formal legal process for the preserved information before the end of the preservation period, the preserved information may be deleted when the preservation period expires.

Qualifications & exceptions

• Extension is stated as something TikTok "may" do, once, for 90 more days.
• Deletion on expiry is stated as "may be deleted", and applies where formal legal process has not been received before the period ends.

Not stated here

• Whether preserved data is always deleted at expiry is not stated.
• Whether received legal process extends retention beyond 180 days is not stated.

Cross-references

• qualifies (model-proposed): TikTok will preserve user data for 90 days on a formal request that meets the criteria — The initial 90-day preservation is limited by the one-extension cap and by possible deletion at expiry.

Legal Rights & Agreement Rules · Restriction or exception

Disclosing preserved data still requires meeting the Section 1 and Section 3 requirements

Preservation is not disclosure. To seek disclosure of preserved data, the requirements of Sections 1 and 3 apply: the request goes to the correct TikTok entity through the web form, with PDF attachments and in English or translated, from a law enforcement official, and with the Section 3 information.

Supporting quotations

To seek disclosure of preserved data, the requirements set out in Sections 1 and 3 of these Guidelines will apply.

1. Basic requirements

First, requests must be addressed to the correct TikTok entity*.

Please note that requests addressed to the incorrect TikTok entity may not be processed until this has been rectified

Second, requests must be submitted to our webform:

must be provided in English or with a translation.

Qualifications & exceptions

• Applies to disclosure of data that has been preserved, not to preservation itself.

Not stated here

• The entity list that Section 1 promises is not in the supplied text.

Sharing & Disclosure · Permission or license

In an emergency TikTok may provide user data it judges necessary to prevent imminent harm

TikTok says it has processes for emergency requests, evaluated case by case. If the information received is enough, in TikTok's assessment, to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, it may provide the user data necessary to prevent that harm, as permitted by applicable law. This is a "may": TikTok is not committed to disclose in every emergency, and the test is TikTok's own assessment.

Supporting quotations

TikTok has processes in place to handle emergency requests. Such requests are evaluated on a case-by-case basis:

if as part of an emergency request we receive information that is sufficient in our assessment to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.

Qualifications & exceptions

• Case-by-case; disclosure only if the information is sufficient "in our assessment".
• Limited to data "necessary to prevent that harm" and "as permitted by applicable law".

Not stated here

• Which data types can be disclosed in an emergency is not listed.
• Whether the user is notified is addressed only by the Section 4 rules.

Cross-references

• referred to by (model-proposed): TikTok may disclose user data without a formal legal request in an emergency — The FAQ emergency case corresponds in subject to the Guidelines' emergency requests section, but cites it as "Section 5" while the supplied text numbers emergency requests as Section 6 and preservation requests as Section 5. The mismatch is quoted and left unresolved.

Legal Rights & Agreement Rules · Procedure

Emergency requests must come from a sworn law enforcement official through the web form

Emergency requests must be submitted through the same web form. They must be made by a sworn law enforcement official and, if sent by email, come from an official law enforcement email domain. People who are not law enforcement and know of an emergency should immediately and directly contact local law enforcement. The text names the web form as the way to request emergency data and also mentions email, without saying how an email request fits that rule.

Supporting quotations

To request this data, you must submit your request through our web form:

All emergency requests must be made by a sworn law enforcement official, and come from an official law enforcement email domain (if sent via email).

Non-law enforcement personnel aware of an emergency situation should immediately and directly contact local law enforcement officials.

Qualifications & exceptions

• The requester must be a sworn law enforcement official.
• The official-domain rule applies "if sent via email".

Not stated here

• How an emailed emergency request relates to the web-form-only instruction is not explained.
• What makes an official "sworn" is not defined.

Legal Rights & Agreement Rules · Procedure

Requests across countries may need to go through a mutual legal assistance treaty or letters rogatory

Section 7 says it may be necessary for a law enforcement authority to request legal assistance from designated government authorities under the Mutual Legal Assistance Treaty ("MLAT") framework, or by letters rogatory. The example given is when the requesting authority is in a different country from the TikTok entity that serves the relevant user, which Section 1 ties to the user's location. The Guidelines point to the separate FAQ for more on MLAT.

Supporting quotations

It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.

For instance, this may arise in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user whose data is requested (refer to Section 1 above).

See our Law Enforcement FAQs for more information in relation to MLAT.

1. Basic requirements

First, requests must be addressed to the correct TikTok entity*.

Qualifications & exceptions

• "May be necessary": the route is needed in some circumstances, with a different-country requester given only as an example ("For instance").

Not stated here

• Which TikTok entity serves which users is not given because the Section 1 list is missing from the supplied text.
• The full set of circumstances in which MLAT is required is not stated here.

Cross-references

• referred to by (model-proposed): MLAT may be needed when the requester is in a different country from the serving TikTok entity — The FAQ explains when MLAT may be necessary and how TikTok helps, building on the Section 7 statement.

Legal Rights & Agreement Rules · Restriction or exception

Requesters must ensure their information is accurate and the request necessary and proportionate

Law enforcement officials must make sure the information they give is complete and accurate to the best of their knowledge and good faith belief. They must also ensure that the disclosure or other action requested is necessary and proportionate for preventing, detecting or investigating offences, or for preventing an emergency.

Supporting quotations

In submitting a request, law enforcement officials are required to ensure that any information provided is complete and accurate to the best of their knowledge and good faith belief, and that the disclosure (or other action) requested is necessary and proportionate for the purposes of the prevention, detection or investigation of offences, or to prevent an emergency.

Qualifications & exceptions

• Accuracy is judged against the official's knowledge and good faith belief.

Not stated here

• The consequences of an inaccurate or disproportionate request are not stated in this passage.

Legal Rights & Agreement Rules · Restriction or exception

The receiving authority must handle disclosed data under applicable law, including data protection law

Once law enforcement has received the data, the law enforcement authority is required to handle it in accordance with applicable laws, including relevant data protection laws. The requirement is placed on the authority, not on TikTok.

Supporting quotations

Once received by law enforcement, the law enforcement authority is required to handle such data in accordance with applicable laws, including relevant data protection laws.

Qualifications & exceptions

• The obligation is on the law enforcement authority after it receives the data.

Not stated here

• Which laws apply, and whether TikTok monitors the authority's handling, is not stated.

Charges & Financial Obligations · Permission or license

TikTok reserves the right to seek reimbursement for the cost of responding

TikTok reserves the right to ask for reimbursement of the costs of responding to law enforcement requests. The text says "reserves the right to seek", so it does not say that TikTok charges in every case or how much.

Supporting quotations

TikTok reserves the right to seek reimbursement for the costs associated with responding to law enforcement requests.

Qualifications & exceptions

• A reserved right to seek reimbursement, not a stated fee.

Not stated here

• Amounts, when TikTok seeks reimbursement and who pays are not stated.

Legal Rights & Agreement Rules · Company practice

TikTok may update the Guidelines and says updates will appear on its website

TikTok may update these Guidelines from time to time, and says changes may be informed by factors including legal or human rights developments and operational or product changes to the platform. All relevant updates will be reflected on the TikTok website. The text does not promise advance notice to requesters.

Supporting quotations

TikTok may update these Guidelines from time to time, and such changes may be informed by a range of factors, including legal or human rights developments, operational and/or product changes to the Platform. All relevant updates will be reflected on the TikTok website.

Qualifications & exceptions

• Reasons are examples ("a range of factors, including").

Not stated here

• Whether requesters receive advance notice of changes is not stated.
• Which updates count as "relevant" is not stated.

Legal Rights & Agreement Rules · Context

The FAQs are meant to be read together with the Guidelines

The FAQ section says it should be read together with TikTok's Law Enforcement Guidelines (the page's main text). The FAQ answers explain and in places restate the Guidelines; they are part of the same page.

Supporting quotations

These FAQS should be read together with TikTok’s

Not stated here

• The text does not say which part prevails if the FAQs and Guidelines differ.

Legal Rights & Agreement Rules · Company practice

Every request is assessed case by case by a dedicated response team before disclosure

TikTok says all requests it receives go through a case-by-case assessment by its dedicated law enforcement response team before any user data is disclosed. The team is described as trained to evaluate requests and as frequently engaging in outreach to explain TikTok's requirements for disclosure.

Supporting quotations

All requests received undergo a case-by-case assessment by TikTok’s dedicated law enforcement response team before any user data is disclosed.

This team is trained to evaluate requests from law enforcement authorities and frequently engages in outreach to communicate TikTok’s requirements for disclosing user data to law enforcement authorities.

Qualifications & exceptions

• Stated for "all requests received" and applies before any user data is disclosed.

Not stated here

• The team's size, training content and decision criteria beyond the stated requirements are not described.

Legal Rights & Agreement Rules · Company commitment

Disclosure rules reflect applicable law, internal policy and human rights commitments, and vary by country

The FAQ repeats that TikTok is committed to cooperating with law enforcement while respecting users' privacy, freedom of expression and other rights. It says the disclosure requirements are set out in the Guidelines (in particular Sections 1 and 3), reflect TikTok's internal policies and procedures, and are based on applicable legal requirements and its commitment to international human rights, including the International Bill of Human Rights. Because laws differ between countries, it says the rules on when data can legally be disclosed also vary to some extent.

Supporting quotations

TikTok is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of our users.

(in particular see Sections 1 and 3).

These requirements reflect our internal policies and procedures for handling requests from law enforcement authorities, and are based on applicable legal requirements and our commitment to international human rights, including the International Bill of Human Rights.

Because the applicable laws vary from one country to another, the rules on when data can legally be disclosed will also vary to some extent and our internal policies and procedures reflect this while at the same time reflecting our global commitments to freedom of expression and privacy.

Qualifications & exceptions

• Disclosure rules "vary to some extent" with the applicable country's laws.

Not stated here

• Which countries' rules differ, and how, is not stated.
• The internal policies and procedures are not set out in this document.

Account & Service Control · Procedure

A TikTok username is shown on the profile page below the profile photo

To help requesters meet the account-identification rule, the FAQ says a TikTok username appears on a user's profile page, below their profile photo, shown as @ followed by the name.

Supporting quotations

A TikTok username can be found on a user's profile page, below their profile photo, shown as @xxxxxx.

Legal Rights & Agreement Rules · Restriction or exception

TikTok may reject requests that do not meet the requirements, with four common examples

The FAQ says TikTok may reject law enforcement data requests that do not meet the requirements set out in the Guidelines. The most common examples are: not addressed to the correct TikTok entity; not specifying the legal process that authorizes law enforcement to request and collect information; not stating the offence under investigation, its circumstances and its connection to TikTok; and overly broad requests for "all user data" or requests with no date range. The FAQ says "may reject", where the Guidelines say overly broad requests "will be refused", so the FAQ is a little softer; the examples are common ones, not a complete list.

Supporting quotations

TikTok may reject data requests from law enforcement authorities where they do not meet the requirements that are clearly set out in our Law Enforcement Guidelines. The most common examples are as follows:

Requests that are not addressed to the correct TikTok entity;

Requests that do not specify the legal process which authorizes law enforcement to request and collect information;

Requests that do not indicate the type of offence(s) under investigation, the circumstances of the offence(s) and in what way it/they are connected to TikTok; and

Overly broad requests for “all user data” or where there are no date ranges indicated.

1. Basic requirements

First, requests must be addressed to the correct TikTok entity*.

Qualifications & exceptions

• The FAQ says TikTok "may" reject; the examples are "the most common", not exhaustive.
• The Guidelines' date range wording includes the unexplained bracket "(for historic data only)"; the FAQ names missing date ranges without that bracket.

Not stated here

• Other grounds for rejection are not listed.
• Whether a rejected request can be corrected and resubmitted is not stated.

Cross-references

• contrast (model-proposed): A request must state the scope and date range; overly broad requests are refused — The Guidelines say overly broad requests "will be refused", while the FAQ says TikTok "may reject" requests that do not meet the requirements and lists overly broad requests as a common example. The wording differs in strength; the document does not reconcile them.

Legal Rights & Agreement Rules · Company practice

TikTok may narrow requests, ask for more information, or say MLAT is needed

Besides rejecting non-compliant requests, TikTok says it will, in accordance with applicable law, seek to narrow the scope of requests (the volume of data, the number of users or the time period); ask for further information, in particular on the legal process or the offence under investigation; or tell the requesting authority that a request through the MLAT process is necessary. The three steps are presented as alternatives joined by "or".

Supporting quotations

Aside from rejecting requests from law enforcement authorities that are not made in accordance with the relevant legal processes and requirements, TikTok will in accordance with applicable law:

Seek to narrow the scope of data requests in terms of the volume of data requested, the number of users they relate to and/or the time period to which they relate;

Ask for further information in support of the request (in particular, for details of the relevant legal process and/or the type of offence(s) under investigation); or

Communicate to the requesting law enforcement authorities that a request via the Mutual Legal Assistance Treaty (“MLAT”) process is necessary to obtain disclosure of the requested data.

It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.

7. Other

Qualifications & exceptions

• TikTok acts "in accordance with applicable law".
• "Seek to" narrow requests describes an effort.

Not stated here

• When TikTok chooses each step is not stated.

Legal Rights & Agreement Rules · Company practice

TikTok may report fraudulent attempts to obtain user data to relevant authorities

TikTok says it may report any fraudulent attempts to obtain user data information to relevant authorities.

Supporting quotations

TikTok may report any fraudulent attempts to obtain user data information to relevant authorities.

Qualifications & exceptions

• Stated as "may report".

Not stated here

• Which authorities are "relevant" is not stated.

Sharing & Disclosure · Permission or license

TikTok may disclose user data without a formal legal request in an emergency

The FAQ says TikTok may disclose user data without receiving a formal legal request based on valid legal process in listed cases. The first is emergency circumstances: where TikTok is satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, it may provide user data necessary to prevent that harm, as permitted by applicable law. The FAQ says this is "explained in Section 5" of the Guidelines. In the supplied text Section 5 is "Preservation requests", and emergency requests are in Section 6, so the citation does not match the numbering; the document does not say which section it intends, and this analysis does not correct it.

Supporting quotations

TikTok may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:

Emergency circumstances: As explained in Section 5 of our Law Enforcement Guidelines, where satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.

Qualifications & exceptions

• "May provide"; disclosure is limited to data necessary to prevent the harm and "as permitted by applicable law".
• The FAQ test is "where satisfied", while the Guidelines state a good faith belief that is sufficient in TikTok's assessment.

Not stated here

• Which Guidelines section the FAQ intends by "Section 5" is not stated; Section 5 in the supplied text covers preservation requests and Section 6 covers emergency requests.
• Which data types may be disclosed in an emergency is not listed.

Cross-references

• refers to (model-proposed): In an emergency TikTok may provide user data it judges necessary to prevent imminent harm — The FAQ emergency case corresponds in subject to the Guidelines' emergency requests section, but cites it as "Section 5" while the supplied text numbers emergency requests as Section 6 and preservation requests as Section 5. The mismatch is quoted and left unresolved.

Sharing & Disclosure · Company practice

In limited circumstances TikTok reports certain user data to authorities or designated bodies on its own

The second case where TikTok may disclose without a formal request is "proactive reports". In limited circumstances, including where TikTok is subject to legal obligations, it reports certain user data to law enforcement authorities or designated bodies. Examples given are reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (NCMEC) for child safeguarding, and reporting suspicious financial transactions to relevant authorities. Law enforcement who later ask for more data after such a Cybertip report must still meet the Guidelines' requirements.

Supporting quotations

Proactive reports obligations: In limited circumstances, including where TikTok is subject to legal obligations, TikTok reports certain user data either to law enforcement authorities or to designated bodies. Examples include reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (“NCMEC”) for child safeguarding purposes and reporting suspicious financial transactions to relevant authorities.

What do I do if I receive a Cybertip report made by TikTok to NCMEC?

If law enforcement has received a Cybertip report made by TikTok to NCMEC, and is now requesting further user data in connection with an investigation, the request must meet the requirements set out in our

Qualifications & exceptions

• Only "in limited circumstances"; "including where TikTok is subject to legal obligations" shows legal duty is one case, not the only one.
• The examples are illustrative ("Examples include").

Not stated here

• Which user data is reported, and the full set of circumstances, is not stated.
• Which "designated bodies" besides NCMEC receive reports is not stated.

Legal Rights & Agreement Rules · Context

Examples of emergencies: child safety, missing persons, self-harm, imminent violence, disasters

Each emergency disclosure request is assessed case by case by the response team on its own circumstances. The FAQ gives examples that may constitute an emergency: child safety and exploitation, missing persons, suicide and self-injury, imminent threats of violence (including terrorism), and natural or man-made disasters such as fires, floods or earthquakes. These are examples that "may" count, not a fixed list of qualifying cases.

Supporting quotations

All emergency disclosure requests undergo a case-by-case assessment and each request will be evaluated by our law enforcement response team based on its particular circumstances. However, the following are some examples that may constitute an emergency:

Cases of child safety and exploitation;

Missing persons;

Suicide and self-injury scenarios;

Imminent threats of violence (including terrorism); or

Natural or man-made disaster situations (such as fires, floods, earthquakes, etc).

Qualifications & exceptions

• The scenarios "may constitute" an emergency; each request is still assessed on its particular circumstances.

Not stated here

• Whether a scenario in the list always qualifies is not stated.

Legal Rights & Agreement Rules · Company practice

Law enforcement in any country can submit a request, but requirements vary

The FAQ says law enforcement authorities in any country can submit a request to TikTok. The requirements for disclosure vary with the location of the user, the location of the requesting authority and, in certain cases, the type of data requested. In certain circumstances TikTok will tell the authority that a request through the MLAT process is necessary to obtain the data.

Supporting quotations

While law enforcement authorities in any country can submit a request to TikTok, the requirements for data disclosure will vary depending on the location of the user, the location of the requesting law enforcement authority and, in certain cases, the type of data requested.

In certain circumstances, TikTok will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data.

Communicate to the requesting law enforcement authorities that a request via the Mutual Legal Assistance Treaty (“MLAT”) process is necessary to obtain disclosure of the requested data.

Qualifications & exceptions

• Requirements vary by the user's location, the requester's location and, "in certain cases", the data type.
• The MLAT notice happens "in certain circumstances".

Not stated here

• What the requirements are for each location or data type is not stated here.
• Which circumstances lead TikTok to say MLAT is necessary is not fully listed.

Legal Rights & Agreement Rules · Company commitment

TikTok publishes Transparency Reports with the number of requests received from each country

TikTok says it publishes Transparency Reports that give the number of requests it has received from each country. The reports are separate documents and are not part of the supplied text.

Supporting quotations

TikTok publishes Transparency Reports with information on the number of requests received from each country.

Not stated here

• The reports are not supplied, so their contents, timing and what they count are unknown.

Legal Rights & Agreement Rules · Context

An MLAT is a treaty for governments to help each other in legal matters

The FAQ defines an MLAT as a treaty between two or more countries on how each assists the others in legal matters such as criminal investigations. Through it, one country's government can seek help from another's in obtaining information from companies located in the other country.

Supporting quotations

An MLAT is a treaty between two or more countries that defines how each will assist in legal matters, such as in criminal investigations. Through an MLAT, the government of one country can seek assistance from the government of another country in obtaining information from companies located in the other country.

Not stated here

• Which treaties apply to particular countries is not stated.

Legal Rights & Agreement Rules · Procedure

MLAT may be needed when the requester is in a different country from the serving TikTok entity

The FAQ says MLAT may be necessary where the requesting authority is in a different country from the TikTok entity that provides the service to the user (see Section 1). An authority unsure whether to use MLAT can contact TikTok, which will endeavour to say whether MLAT is appropriate and to direct it to the designated "central authority" in the appropriate country.

Supporting quotations

It may be necessary in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user

On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.

It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory.

7. Other

1. Basic requirements

First, requests must be addressed to the correct TikTok entity*.

Qualifications & exceptions

• "May be necessary"; TikTok will "endeavour" to advise, which is an effort, not a guarantee.

Not stated here

• Which TikTok entity serves which users is not given because the Section 1 list is missing from the supplied text.

Cross-references

• refers to (model-proposed): Requests across countries may need to go through a mutual legal assistance treaty or letters rogatory — The FAQ explains when MLAT may be necessary and how TikTok helps, building on the Section 7 statement.

Legal Rights & Agreement Rules · Procedure

Non-law-enforcement requests go to TikTok's content and intellectual property reporting channels

The FAQ says requests that are not from law enforcement should be directed elsewhere. Reports of content that may breach TikTok's Community Guidelines follow the reporting steps on a linked help page, and reports of alleged copyright or trademark infringement are made under TikTok's Intellectual Property Policy through its Copyright Infringement Report or Trademark Infringement Report forms. The linked pages are not part of the supplied text.

Supporting quotations

Non-law enforcement requests should be directed as follows:

Report Content: Details of how to report various types of content that may be in breach of TikTok’s Community Guidelines are available

Report IP infringement: Reports of alleged copyright or trademark infringement should be made in accordance with TikTok’s

Qualifications & exceptions

• The two routes listed concern content reports and IP infringement reports only.

Not stated here

• Where other kinds of non-law-enforcement requests, such as a user's own data request, should go is not stated here.
• The linked help page, Intellectual Property Policy and report forms are not supplied.

Legal Rights & Agreement Rules · Company practice

TikTok endeavours to respond in a timely manner but states no fixed response time

TikTok's dedicated team endeavours to respond to all requests in a timely manner, but response times vary, in particular with caseload and the complexity of the request. A time-sensitive request should say so and explain why. Longer response times can be expected where a request does not meet the requirements in the Guidelines and FAQs.

Supporting quotations

TikTok’s dedicated law enforcement response team endeavours to respond to all requests in a timely manner but response times can vary in particular due to the caseload volume at a given time and the complexity of a request.

If a particular request is time-sensitive, we would ask the requesting law enforcement officer to note this in the request (explaining the reasons).

Longer response times can be expected where the request does not meet the requirements set out in our

Qualifications & exceptions

• "Endeavours" describes an effort; no deadline is given.

Not stated here

• No target or maximum response time is stated.

Legal Rights & Agreement Rules · Procedure

Follow-up data requests after a Cybertip report must meet the Guidelines and cite the report number

If law enforcement received a Cybertip report that TikTok made to NCMEC and now wants more user data for an investigation, its request must still meet the requirements in the Guidelines and the FAQs. To help TikTok process the request, it should give the report number NCMEC assigned to the Cybertip report.

Supporting quotations

If law enforcement has received a Cybertip report made by TikTok to NCMEC, and is now requesting further user data in connection with an investigation, the request must meet the requirements set out in our

To help us more efficiently process your request, please specify in your request the report number assigned to the Cybertip report by NCMEC.

Qualifications & exceptions

• Naming the report number is a request ("please specify") to help processing, not stated as a condition.

Not stated here

• Which data TikTok would disclose after a Cybertip is not stated.