The Guidelines are for law enforcement seeking data of U.S.-based TikTok users, handled by TikTok USDS Joint Venture LLC
These Guidelines (last updated 6 October 2026) are a reference for law enforcement officials who want the data of U.S.-based users of the TikTok platform, which is operated in the United States by TikTok USDS Joint Venture LLC ("TikTok U.S."). Requests that relate to TikTok U.S. Shop data are sent to a separate set of TikTok Shop guidelines instead.
Details
Who
TikTok USDS Joint Venture LLC ("TikTok U.S.")
Where
U.S.-based users
When
Last updated: 6 October 2026
Supporting quotations
Last updated: 6 October 2026
These guidelines (“Guidelines”) are a reference for law enforcement officials seeking the data of U.S.-based users of the TikTok platform (the “Platform”), which is operated by TikTok USDS Joint Venture LLC in the United States (“TikTok U.S.”)
TikTok U.S. follows internal procedures beyond the Guidelines and rejects requests that go against its policies
In addition to these Guidelines, TikTok U.S. says it has internal policies and procedures for how it handles and responds to law enforcement requests. It describes them as informed by legal and human rights standards and developed to limit adverse human rights impacts while still letting it comply with legitimate, valid legal requests from law enforcement, including regulatory authorities where relevant. It rejects requests that go against its policies and procedures.
Details not recorded for this card
Supporting quotations
To achieve this, in addition to these Guidelines, TikTok U.S. has internal policies and procedures governing how TikTok U.S. handles and responds to law enforcement requests. These procedures are informed by legal and human rights standards and have been developed in a way that seeks to limit adverse human rights impacts, while enabling TikTok U.S. to comply with legitimate, valid legal requests from law enforcement (including regulatory authorities, where relevant) to disclose user data.
We reject requests which go against our policies and procedures.
Qualifications & exceptions
"Legitimate, valid" requests only; the source does not define those terms beyond the Guidelines.
Not stated here
The internal policies and procedures are not supplied, so any requirements or criteria they add beyond these Guidelines are unknown.
The linked human rights statement is not supplied in this source.
Requests about U.S.-located users go to TikTok USDS Joint Venture LLC; a wrong-entity request may be delayed
A request must be addressed to the correct TikTok entity, which depends on where the relevant user is located. For users located in the United States, that is TikTok USDS Joint Venture LLC in Culver City, California. For users located outside the United States, the Guidelines point to the global TikTok Law Enforcement Guidelines, and say that if the user's location is unclear the username or other identifier can be entered on the TikTok Safety Enforcement Tool to confirm the region or country. A request addressed to the wrong entity may not be processed until that is fixed, which may cause delay.
Details
What it covers
TikTok USDS Joint Venture LLC, 5800 Bristol Parkway, Suite 300, Culver City, CA 90230
Condition
user located in the United States
Supporting quotations
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user.
Requests for data of users located in the United States:
TikTok USDS Joint Venture LLC 5800 Bristol Parkway, Suite 300 Culver City, CA 90230 UNITED STATES
For requests for data of users located outside the United States, please refer to the global version of the TikTok Law Enforcement Guidelines. If you are unsure of where the user is located, please insert the username (or other identifier) on the TikTok Safety Enforcement Tool to confirm the correct region/country.
Please note that requests addressed to the incorrect TikTok entity may not be processed until this has been rectified, which may cause unnecessary delay.
Qualifications & exceptions
Entity depends on the user's location, not the requester's.
Wrong-entity requests "may not be processed until this has been rectified" (not stated as automatically rejected).
Not stated here
The asterisk after "entity" in the first requirement has no matching note in the supplied source.
How the Safety Enforcement Tool uses the identifier entered into it is not described.
The linked global TikTok Law Enforcement Guidelines are not supplied here, so what they require for users outside the United States cannot be stated.
Requests go through the webform as PDFs, in English, from law enforcement officials only
Requests must be submitted through TikTok's law enforcement webform, with any attachments such as a warrant or court order in PDF format; Word format will not be accepted. Requests and supporting documents such as orders, warrants or subpoenas must be in English or come with a translation. TikTok U.S. says it will not respond to requests for user data sent by non-law enforcement officials or sent through informal channels such as personal email addresses.
Details not recorded for this card
Supporting quotations
Second, requests must be submitted to our webform: www.tiktok.com/legal/report/lawenforcementrequest with any attachments (for example, official warrant, court order, or other documentation supporting the request) in PDF format (word format will not be accepted).
All requests to TikTok U.S. and any supporting documents (including orders, warrants, and/or subpoenas or equivalent) must be provided in English or with a translation.
TikTok U.S. will not respond to requests for user data sent by non-law enforcement officials or when they are sent through informal channels (such as personal email addresses).
Qualifications & exceptions
Attachments must be PDF; Word format is not accepted.
Non-English documents need a translation.
Not stated here
The linked webform page is not supplied here, so what it asks for or how it works cannot be stated.
The source does not say what happens to a request that arrives by email or by a non-listed channel other than that TikTok U.S. will not respond to informal channels.
Legal Rights & Agreement Rules · Restriction or exception
Confirming receipt of a request does not waive TikTok U.S.'s objections
If TikTok U.S. confirms that it received correspondence, the confirmation is for convenience only. It does not give up any right to object, including objections for lack of jurisdiction, invalid legal process or lack of proper service.
Details not recorded for this card
Supporting quotations
Any confirmation of receipt of correspondence is for convenience only and, in doing so, TikTok U.S. does not waive any right of objection (including for lack of jurisdiction, invalid legal process or lack of proper service).
Qualifications & exceptions
The listed objections are examples ("including"), not a complete list.
TikTok U.S. may hold subscriber, log-in and interaction data that can be the subject of a valid request
TikTok U.S. says it may hold the following non-content user data that can be the subject of a valid law enforcement request: subscriber information (TikTok username, email address and phone number depending on how the user signed up, account creation date, IP address at account creation, and device information); log-in and log-out data (IP address of account log-ins and log-outs); and interaction data without content (IP address logs for interactions, for a specified period only, and video creation time and date).
Details
Who
TikTok U.S.
What it covers
subscriber information, log-in/log-out data and non-content interaction data
Supporting quotations
TikTok U.S. may hold the following user data, which can be the subject of a valid law enforcement request:
Subscriber information
TikTok username
Email address (depending on user’s sign-up method)
Phone number (depending on user’s sign-up method)
Account creation date
IP address at account creation
Device information
Log-in / log-out data
IP address of account log-ins/log-outs
Interaction data (non-content)
IP address logs for interactions (for a specified period only)
Video creation time/date
Qualifications & exceptions
Email address and phone number are held "depending on user's sign-up method".
IP address logs for interactions are held "for a specified period only".
"May hold": the list says what could be the subject of a request, not what is held for every user.
Not stated here
The "specified period" for interaction IP address logs is not stated.
What "device information" covers is not defined.
The source does not say whether the list is exhaustive.
Data Access & Collection · Company practice
Content data TikTok U.S. may hold includes video content, comments and direct message content
TikTok U.S. lists content data among the user data it may hold that can be the subject of a valid law enforcement request: video content, comments and direct message content.
Details not recorded for this card
Supporting quotations
Content data
Video content
Comments
Direct message content
Qualifications & exceptions
"May hold": which content is held for a given user is not stated.
Not stated here
The source does not say how long content data is kept or whether private content such as direct messages is held for every user.
Data Access & Collection · Company practice
Transaction data TikTok U.S. may hold includes payment card information and gifts sent or received
TikTok U.S. lists transaction data among the user data it may hold that can be the subject of a valid law enforcement request: payment information, such as debit or credit card information, and gifts received or sent.
Details not recorded for this card
Supporting quotations
Transaction data
Payment information, such as debit/credit card information
Gift received/sent
Qualifications & exceptions
Payment information is given as an example ("such as debit/credit card information"), not a complete list.
Not stated here
Which payment details TikTok U.S. holds beyond the examples given is not stated.
Legal Rights & Agreement Rules · Restriction or exception
Requests must state data type and legal basis; content data generally needs a court order or warrant
Each request must clearly state which type of data it asks for and the legal basis for asking. If it does not meet the applicable legal requirements for that data, the data will not be disclosed. This is in particular the case for content data, which generally requires a domestic court or judicial order, warrant or equivalent. Section 3 asks the request to specify the legal process, citing the relevant article or section of an Act, Statute or Code.
Details
Condition
request does not meet the applicable legal requirements for the requested data
What it covers
content data
Supporting quotations
Each request must clearly specify the type of data requested and the legal basis for requesting it.
If the request does not meet the applicable legal requirements for the requested data (as listed in Section 3 below), the data will not be disclosed.
This is in particular the case for requests relating to content data (which generally require a domestic court / judicial order, warrant or equivalent).
3. Requirements when making a request
Legal basis for the request:
Relevant legal process:
Qualifications & exceptions
Content data "generally" requires a domestic court or judicial order, warrant or equivalent; "generally" signals exceptions the source does not describe.
Not stated here
The source says the legal requirements are "listed in Section 3 below", but Section 3 describes what a request must contain and does not list separate legal requirements for each type of data, so the legal threshold for subscriber, log-in, interaction and transaction data is not stated.
"Domestic" is not defined (domestic to which country or court).
The exceptions that "generally" leaves open for content data are not described.
Cross-references
contrast (model-proposed): TikTok U.S. may disclose user data in an emergency without a formal legal request — Section 2 says data is not disclosed when a request does not meet the applicable legal requirements, while the FAQ says TikTok U.S. may disclose user data in an emergency without a formal legal request. The source states both and does not reconcile them beyond the emergency wording.
Requests must be non-editable, on signed and dated agency letterhead, and must name the TikTok application
To ensure timely processing, every law enforcement request must be submitted in a non-editable electronic format such as PDF, on official law enforcement agency letterhead, signed and dated. The legal process itself (a preservation request, subpoena, court order or warrant) must explicitly name the TikTok application within the body of the document. Generic requests, or process naming unrelated third-party services, will not be accepted.
Details
What it covers
legal process (preservation request, subpoena, court order or warrant)
Supporting quotations
To ensure timely processing, all law enforcement requests must be submitted in a non-editable electronic format (such as PDF), written on official law enforcement agency letterhead, signed, and dated.
Platform Identification: The legal process (preservation request, subpoena, court order, or warrant) must explicitly name the TikTok application within the body of the document itself. Generic requests or process naming unrelated third-party services will not be accepted.
Qualifications & exceptions
The application must be named in the body of the legal process itself, not only in a cover note.
Not stated here
What counts as naming "the TikTok application" (for example whether a username or URL alone is enough) is not defined.
Legal Rights & Agreement Rules · Procedure
Every request must identify the requesting authority and officer, with an official email domain
Every request must include all the listed information. For the requesting law enforcement authority (or court) that means the name and location of the authority; for a court order, the location and name of the court and the judge or magistrate. It also means the requesting officer's name, badge or identification number, phone number (including any direct dial extension) and an email address that must be from an official email domain.
Details not recorded for this card
Supporting quotations
Every request must additionally include all of the following information:
Details of requesting law enforcement authority (or Court):
Requesting Authority (or Court): The name and location of the relevant authority. In the case of a Court order, the request should indicate the location and name of the relevant Court and judge / magistrate.
Requesting officer: The requesting officer’s name, badge / identification number, email address (this must be from an official email domain) and phone number (including any direct dial extension).
Qualifications & exceptions
For a court order, the request "should" indicate the court and judge or magistrate; the officer's email must be from an official email domain.
Not stated here
The first sentence says every request "must" include all of the items, but some items are worded "should", so which items are strictly required is not fully clear.
Legal Rights & Agreement Rules · Procedure
A request about a specific user must give an approved account identifier, and a screenshot is requested
When asking for data about a specific user, the request must provide a specific TikTok username or an approved account identifier tied to the account. TikTok also asks, but does not say it requires, a screenshot of the account to help it find the right account faster. The approved identifiers are a TikTok User ID, a TikTok username (an account URL or screenshot is accepted), a phone number, an email address, and a video ID (a video URL or screenshot is accepted).
Details not recorded for this card
Supporting quotations
Details of relevant user account:
TikTok username: When requesting data regarding a specific user of the Platform, you must provide a specific TikTok username or an approved account identifier associated with the relevant account. We also request that a screenshot of the relevant account be provided (to help us to identify the correct account more quickly). The following are TikTok approved identifiers:
TikTok User ID
TikTok username (account URL or screenshot accepted)
Phone number
Email address
Video ID (video URL or screenshot accepted)
Qualifications & exceptions
The screenshot is a request ("We also request"), not stated as mandatory.
Applies "when requesting data regarding a specific user".
Not stated here
The source does not say what TikTok does with a request that gives none of the approved identifiers.
Legal Rights & Agreement Rules · Procedure
Requests should state the data scope and a date range; overly broad requests will be refused
The request should clearly specify the scope of the data requested, and overly broad requests will be refused. It must specify a date (and, if possible, a time) or a date range as relevant to the request, for historic data only.
Details not recorded for this card
Supporting quotations
Data requested: The request should clearly specify the scope of the data requested. Overly broad requests will be refused.
Date range: The request must specify a date (and, if possible, a time), or a date range as relevant to the request (for historic data only).
Qualifications & exceptions
The date or date range applies "for historic data only".
Time of day is requested only "if possible".
Not stated here
"Overly broad" is not defined in this section.
The source does not say what the date requirement means for data that is not historic.
Legal Rights & Agreement Rules · Procedure
Requests should cite the legal process and describe the offence under investigation and its link to TikTok
Under "Legal basis for the request", the request should clearly specify the legal process that authorizes law enforcement to request and collect information to prevent, detect or investigate criminal offences, citing the relevant article or section of an Act, Statute or Code. It should separately indicate the type of offence under investigation (also citing the relevant article or section), the circumstances of the offence, and how it is connected to the Platform.
Details not recorded for this card
Supporting quotations
Legal basis for the request:
Relevant legal process: The request should clearly specify the legal process (i.e. citing the relevant article or section of an Act / Statute / Code), which authorizes law enforcement to request and collect information for the purposes of prevention, detection or investigation of criminal offences.
Context and Offence(s) under investigation: The request should separately indicate the type of offence(s) under investigation (citing the relevant article or section of Act / Statute / Code), the circumstances of the offence and in what way it is connected to the Platform.
Qualifications & exceptions
The legal purpose stated is prevention, detection or investigation of criminal offences.
Not stated here
The source does not name any specific Act, Statute or Code; the cited laws are whatever the requester supplies.
TikTok U.S. policy is to notify U.S. users when it produces their data, unless prohibited or exceptional
TikTok U.S.'s policy is to notify U.S. TikTok users when it produces their user data to law enforcement under legal process. Exceptions are when the law prohibits notice, or when TikTok U.S. determines, in its sole discretion, that exceptional circumstances apply, for example in child exploitation cases or when notice could otherwise put individuals at risk of harm.
Details not recorded for this card
Supporting quotations
Our policy is to notify U.S. TikTok users of our production of user data to law enforcement pursuant to legal process, unless prohibited by law or where we determine in our sole discretion that exceptional circumstances apply, including, for example, in child exploitation cases or when such notice could otherwise put individuals at risk of harm.
Qualifications & exceptions
Applies to production of user data pursuant to legal process, for U.S. TikTok users.
The exceptions for exceptional circumstances are decided in TikTok U.S.'s "sole discretion"; the examples are non-exhaustive ("including, for example").
Not stated here
The source does not say when notice is given relative to the production, or in what form.
contrast (model-proposed): TikTok U.S.'s general practice is not to notify users of emergency requests — The notification policy says users are notified of production under legal process, while the emergency section says the general practice is not to notify users of emergency requests. The two apply to different kinds of requests, and the source does not say whether an emergency disclosure is later notified.
Sharing & Disclosure · Restriction or exception
TikTok U.S. will not notify when prohibited by law; agencies seeking no notice should provide a court order
TikTok U.S. will not notify a user when notice is prohibited by law, including when it receives a court order prohibiting notification. Law enforcement agencies that believe notice would jeopardize an investigation or have other adverse results should provide a court order or other binding legal process prohibiting notification. Requests should also indicate whether user notification is permitted.
Details not recorded for this card
Supporting quotations
We will not provide user notification when it is prohibited by law, including when we receive a court order prohibiting user notification. Law enforcement agencies that believe user notification would jeopardize an investigation or have other adverse results should provide a court order or other binding legal process prohibiting notification.
User notification: Please indicate whether user notification is permitted
Qualifications & exceptions
The prohibition must come from law or a court order or other binding legal process.
Not stated here
The source does not say whether TikTok U.S. would hold off on notice at an agency's request without a court order or other binding legal process, apart from the exceptional circumstances its policy reserves to its own discretion.
After a non-disclosure order or legal restriction expires, TikTok may give the user delayed notice
Where a legal non-disclosure order or statutory restriction on notice expires, TikTok may give the affected user delayed notice after the prohibition ends, consistent with applicable law and platform policy.
Details not recorded for this card
Supporting quotations
Where a legal non-disclosure order or statutory restriction expires, TikTok may provide delayed notice to the affected user following the expiration of the legal prohibition, consistent with applicable law and platform policy.
Qualifications & exceptions
"May", not "will": delayed notice is not promised.
Subject to applicable law and platform policy.
Not stated here
The source does not say whether or when delayed notice will actually be given, or what platform policy governs it.
Retention & Deletion · Company practice
TikTok U.S. will preserve user data for 90 days on a qualifying formal request, with one 90-day extension
TikTok U.S. says it will honor formal law enforcement requests to preserve user data for 90 days, but only if the request fulfils the criteria above. It preserves information for an initial 90-day period and may extend it for an additional 90 days on receipt of a formal request to extend. It may not honor multiple extension requests beyond one additional 90-day period.
Details
When
initial 90 days, one additional 90-day period
Supporting quotations
TikTok U.S. will honor formal requests by law enforcement to preserve user data for 90 days only if it fulfils the criteria above.
TikTok U.S. will preserve information for an initial 90 day period (and may extend for an additional 90-day period upon receipt of a formal request to extend the preservation). We may not honour multiple extension requests beyond one additional 90-day period.
Qualifications & exceptions
Only if the request meets the criteria above.
Extension requires a formal request; further extensions "may" not be honored.
Not stated here
"The criteria above" is not spelled out beyond the requirements of Sections 1 and 3 that the source mentions for preservation and disclosure.
Preservation requests: webform, signed letterhead PDF naming user, data and dates; overly broad ones not actioned
Preservation requests must be submitted through the law enforcement webform with the request attached as a PDF. They must be sent on law enforcement letterhead, signed, and must clearly identify the specific user data to be preserved by username, data type and date ranges as set out in Section 3. Overly broad or unspecific preservation requests will not be actioned.
Preservation requests must be sent on law enforcement letterhead, signed, and must clearly identify the specific user data to be preserved (by reference to username, the data type and date ranges as per Section 3 above).
Overly broad or unspecific preservation requests will not be actioned.
Qualifications & exceptions
Must identify the specific data to be preserved by username, data type and date ranges.
Not stated here
The linked webform page is not supplied here, so what it asks for cannot be stated.
TikTok U.S.'s general practice is not to notify users of preservation requests
It is TikTok U.S.'s general practice not to notify users of preservation requests, subject to applicable law and policy. The user-notification policy described in Section 4 is stated for the production of user data.
Details not recorded for this card
Supporting quotations
It is our general practice not to notify users of preservation requests, subject to applicable law and policy.
Qualifications & exceptions
"General practice", subject to applicable law and policy.
Not stated here
The source does not say whether a user is told about a preservation request after the fact, for example if their data is later produced.
Preserved data may be deleted when the preservation period ends without formal legal process
If TikTok U.S. does not receive formal legal process for the preserved information before the preservation period ends, the preserved information may be deleted when the period expires.
Details not recorded for this card
Supporting quotations
If TikTok U.S. does not receive formal legal process for the preserved information before the end of the preservation period, the preserved information may be deleted when the preservation period expires.
Qualifications & exceptions
"May be deleted": deletion is not promised.
Not stated here
The source does not say when or whether preserved information is actually deleted after expiry, or what happens to it if legal process arrives.
TikTok U.S. may provide user data in an emergency involving imminent harm or risk of death or serious physical injury
TikTok U.S. says it has processes for emergency requests and evaluates each case by case. If an emergency request gives information that, in TikTok U.S.'s assessment, is enough to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, it may provide the user data necessary to prevent that harm, as permitted by applicable law.
Details
Who
TikTok U.S.
Condition
good faith belief of an emergency involving imminent harm or risk of death or serious physical injury
Supporting quotations
TikTok U.S. has processes in place to handle emergency requests. Such requests are evaluated on a case-by-case basis: if as part of an emergency request we receive information that is sufficient in our assessment to establish a good faith belief that there is an emergency involving imminent harm or the risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Qualifications & exceptions
Case-by-case evaluation.
Applies only when the information is "sufficient in our assessment" to establish a good faith belief of an emergency involving imminent harm or risk of death or serious physical injury.
Limited to user data "necessary to prevent that harm", and "as permitted by applicable law".
Not stated here
The source does not say whether an emergency disclosure needs any legal process, which data types may be provided, or how TikTok U.S. applies its assessment.
Emergency requests must come through the web form from a sworn law enforcement official
To make an emergency request, the requester must use TikTok U.S.'s web form. All emergency requests must be made by a sworn law enforcement official and, if sent by email, must come from an official law enforcement email domain. People who are not law enforcement but know of an emergency should immediately and directly contact local law enforcement officials.
Details not recorded for this card
Supporting quotations
To request this data, you must submit your request through our web form
All emergency requests must be made by a sworn law enforcement official, and come from an official law enforcement email domain (if sent via email). Non-law enforcement personnel aware of an emergency situation should immediately and directly contact local law enforcement officials.
Qualifications & exceptions
Requester must be a sworn law enforcement official.
The official email domain condition applies "if sent via email".
Not stated here
The linked web form page is not supplied here, so what it asks for cannot be stated.
The text requires the web form but also mentions requests "sent via email"; whether email is accepted for emergency requests is not stated.
TikTok U.S.'s general practice is not to notify users of emergency requests
It is TikTok U.S.'s general practice not to notify users of emergency requests, subject to applicable law and policy.
Details not recorded for this card
Supporting quotations
It is our general practice not to notify users of emergency requests, subject to applicable law and policy.
Qualifications & exceptions
"General practice", subject to applicable law and policy.
Not stated here
The source does not say whether a user is told after an emergency disclosure; the user-notification policy in Section 4 is stated for production of user data under legal process.
Cross-references
contrast (model-proposed): TikTok U.S. policy is to notify U.S. users when it produces their data, unless prohibited or exceptional — The notification policy says users are notified of production under legal process, while the emergency section says the general practice is not to notify users of emergency requests. The two apply to different kinds of requests, and the source does not say whether an emergency disclosure is later notified.
Requesters in a different country may need a Mutual Legal Assistance Treaty request or letters rogatory
A law enforcement authority may need to request legal assistance from designated government authorities under the Mutual Legal Assistance Treaty (MLAT) framework, or by letters rogatory. The source gives as an example the case where the requesting authority is in a different country from the TikTok entity that provides the service to the user whose data is sought.
Details not recorded for this card
Supporting quotations
It may be necessary for a law enforcement authority to submit a request for legal assistance to designated government authorities under the Mutual Legal Assistance Treaty (“MLAT”) framework, or by letters rogatory. For instance, this may arise in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user whose data is requested (refer to Section 1 above).
First, requests must be addressed to the correct TikTok entity*. This is based on the location of the relevant user.
Qualifications & exceptions
"May be necessary", for instance when the requester and the TikTok entity are in different countries.
Not stated here
This paragraph points to the FAQs for more on MLAT; it does not itself say which cases require it.
Legal Rights & Agreement Rules · Restriction or exception
Requesters must give accurate information, ask only what is necessary and proportionate, and handle data lawfully
Law enforcement officials making a request are required to ensure that the information they give is complete and accurate to the best of their knowledge and good faith belief, and that the disclosure or other action requested is necessary and proportionate for preventing, detecting or investigating offences, or preventing an emergency. Once law enforcement has received the data, the authority is required to handle it in accordance with applicable laws, including relevant data protection laws.
Details not recorded for this card
Supporting quotations
In submitting a request, law enforcement officials are required to ensure that any information provided is complete and accurate to the best of their knowledge and good faith belief, and that the disclosure (or other action) requested is necessary and proportionate for the purposes of the prevention, detection or investigation of offences, or to prevent an emergency.
Once received by law enforcement, the law enforcement authority is required to handle such data in accordance with applicable laws, including relevant data protection laws.
Qualifications & exceptions
Accuracy is judged to the requester's "best of their knowledge and good faith belief".
Not stated here
The source does not say how TikTok U.S. checks these requirements or what follows if they are not met.
Legal Rights & Agreement Rules · Company commitment
TikTok U.S. may update the Guidelines from time to time and will reflect relevant updates on its website
TikTok U.S. may update these Guidelines from time to time. Changes may be informed by legal or human rights developments and by operational or product changes to the Platform. All relevant updates will be reflected on the TikTok U.S. website.
Details not recorded for this card
Supporting quotations
TikTok U.S. may update these Guidelines from time to time, and such changes may be informed by a range of factors, including legal or human rights developments, operational and/or product changes to the Platform. All relevant updates will be reflected on the TikTok U.S. website.
Qualifications & exceptions
Updates are reflected on the website; the factors listed are examples ("a range of factors, including").
Not stated here
The source does not describe advance notice of changes, a change log or when updates take effect.
The FAQs are meant to be read together with the Guidelines
The Frequently Asked Questions section says the FAQs should be read together with TikTok U.S.'s Law Enforcement Guidelines.
Details not recorded for this card
Supporting quotations
These FAQS should be read together with
Not stated here
The source does not say how the FAQs and the Guidelines rank if they differ.
Sharing & Disclosure · Company practice
Every request is assessed case by case by a dedicated law enforcement response team before data is disclosed
All requests received go through a case-by-case assessment by TikTok U.S.'s dedicated law enforcement response team before any user data is disclosed. The team is trained to evaluate requests from law enforcement authorities and frequently engages in outreach to communicate TikTok U.S.'s requirements for disclosing user data.
Details not recorded for this card
Supporting quotations
All requests received undergo a case-by-case assessment by TikTok U.S’s dedicated law enforcement response team before any user data is disclosed. This team is trained to evaluate requests from law enforcement authorities and frequently engages in outreach to communicate TikTok U.S’s requirements for disclosing user data to law enforcement authorities.
Qualifications & exceptions
Applies to "all requests received" and to "any" disclosure of user data.
Not stated here
The size, location, training content or decision criteria of the response team are not described.
Legal Rights & Agreement Rules · Company commitment
Disclosure requirements are said to reflect applicable law and human rights commitments, and vary by country
TikTok U.S. says it is committed to cooperating with law enforcement while respecting users' privacy, freedom of expression and other rights. It says its requirements for disclosing user data are set out in the Guidelines (in particular Sections 1 and 3), reflect its internal policies and procedures, and are based on applicable legal requirements and its commitment to international human rights, including the International Bill of Human Rights. Because laws vary from country to country, the rules on when data can legally be disclosed also vary to some extent, and its internal policies reflect that while also reflecting its global commitments to freedom of expression and privacy.
Details not recorded for this card
Supporting quotations
TikTok U.S. is committed to cooperating with law enforcement while respecting the privacy, freedom of expression, and other rights of our users.
requirements for disclosing user data to law enforcement authorities are clearly set out in TikTok U.S. Law Enforcement Guidelines (in particular see Sections 1 and 3).
These requirements reflect our internal policies and procedures for handling requests from law enforcement authorities, and are based on applicable legal requirements and our commitment to international human rights, including the International Bill of Human Rights. Because the applicable laws vary from one country to another, the rules on when data can legally be disclosed will also vary to some extent and our internal policies and procedures reflect this while at the same time reflecting our global commitments to freedom of expression and privacy.
Qualifications & exceptions
The rules on disclosure "will also vary to some extent" by country.
Not stated here
The source does not say how the International Bill of Human Rights commitment changes any particular decision, or which country's rules apply in a given case.
The internal policies and procedures are not supplied.
Legal Rights & Agreement Rules · Restriction or exception
TikTok U.S. may reject requests that miss the requirements, such as wrong entity, no legal process or overly broad scope
TikTok U.S. says it may reject law enforcement data requests that do not meet the requirements in the Guidelines. The most common examples it gives are requests that are not addressed to the correct TikTok entity, requests that do not specify the legal process authorizing law enforcement to request and collect information, requests that do not indicate the offence under investigation, its circumstances and its connection to TikTok, and overly broad requests for "all user data" or requests with no date ranges.
Details not recorded for this card
Supporting quotations
TikTok U.S may reject data requests from law enforcement authorities where they do not meet the requirements that are clearly set out in TikTok U.S. Law Enforcement Guidelines. The most common examples are as follows:
Requests that are not addressed to the correct TikTok entity;
Requests that do not specify the legal process which authorizes law enforcement to request and collect information;
Requests that do not indicate the type of offence(s) under investigation, the circumstances of the offence(s) and in what way it/they are connected to TikTok; and
Overly broad requests for “all user data” or where there are no date ranges indicated.
Qualifications & exceptions
"May reject": rejection is permitted, not guaranteed.
The examples are the "most common" ones, not a full list.
Legal Rights & Agreement Rules · Company practice
TikTok U.S. may narrow the scope of a request, ask for more information, or say an MLAT request is needed
Beyond rejecting requests that do not follow the relevant legal processes and requirements, TikTok U.S. says it will, in accordance with applicable law, seek to narrow the scope of data requests by volume of data, number of users or time period; ask for further information, in particular the legal process or type of offence; or tell the requesting authority that a Mutual Legal Assistance Treaty request is necessary to obtain the data.
Details not recorded for this card
Supporting quotations
Aside from rejecting requests from law enforcement authorities that are not made in accordance with the relevant legal processes and requirements, TikTok U.S will in accordance with applicable law:
Seek to narrow the scope of data requests in terms of the volume of data requested, the number of users they relate to and/or the time period to which they relate;
Ask for further information in support of the request (in particular, for details of the relevant legal process and/or the type of offence(s) under investigation); or
Communicate to the requesting law enforcement authorities that a request via the Mutual Legal Assistance Treaty (“MLAT”) process is necessary to obtain disclosure of the requested data.
Qualifications & exceptions
"In accordance with applicable law."
The list is joined by "or": the source does not say which step is used when.
Not stated here
The source does not say when TikTok U.S. narrows or asks for more instead of rejecting.
Legal Rights & Agreement Rules · Company practice
TikTok may report fraudulent attempts to obtain user data to the relevant authorities
TikTok may report any fraudulent attempt to obtain user data to relevant authorities.
Details not recorded for this card
Supporting quotations
TikTok may report any fraudulent attempts to obtain user data information to relevant authorities.
Not stated here
The source does not say who counts as "relevant authorities" or what makes an attempt fraudulent.
Sharing & Disclosure · Permission or license
TikTok U.S. may disclose user data in an emergency without a formal legal request
TikTok U.S. says it may disclose user data without receiving a formal legal request based on valid legal process in listed cases. One case is an emergency: where it is satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, it may provide user data necessary to prevent that harm, as permitted by applicable law.
Details not recorded for this card
Supporting quotations
TikTok U.S may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:
Emergency circumstances: As explained in Section 5 of the Law Enforcement Guidelines, where satisfied there is an emergency involving imminent harm or risk of death or serious physical injury to a person, we may provide user data necessary to prevent that harm, as permitted by applicable law.
Qualifications & exceptions
Only user data "necessary to prevent that harm", and "as permitted by applicable law".
Not stated here
The paragraph says emergencies are "explained in Section 5 of the Law Enforcement Guidelines", but in this document Section 5 is Preservation Requests and emergency requests are in Section 6; the source does not say whether this is a numbering discrepancy.
Section 2 says data is not disclosed if a request does not meet the legal requirements; the source does not reconcile that with disclosure without a formal legal request in emergencies beyond the wording quoted.
Cross-references
contrast (model-proposed): Requests must state data type and legal basis; content data generally needs a court order or warrant — Section 2 says data is not disclosed when a request does not meet the applicable legal requirements, while the FAQ says TikTok U.S. may disclose user data in an emergency without a formal legal request. The source states both and does not reconcile them beyond the emergency wording.
TikTok U.S. reports certain user data on its own to law enforcement or designated bodies in limited circumstances
TikTok U.S. may disclose user data without a formal legal request in limited circumstances, including where it is subject to legal obligations, by reporting certain user data to law enforcement authorities or to designated bodies. Examples are reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (NCMEC) for child safeguarding purposes and reporting suspicious financial transactions to relevant authorities.
Details not recorded for this card
Supporting quotations
TikTok U.S may disclose user data without receiving a formal legal request (based on valid legal process) in the following cases:
Proactive reporting obligations: In limited circumstances, including where TikTok U.S is subject to legal obligations, TikTok U.S reports certain user data either to law enforcement authorities or to designated bodies. Examples include reporting suspected child exploitation to the U.S. National Center for Missing and Exploited Children (“NCMEC”) for child safeguarding purposes and reporting suspicious financial transactions to relevant authorities.
Qualifications & exceptions
"Limited circumstances, including where TikTok U.S is subject to legal obligations": legal obligation is one example, not the only trigger.
Examples are NCMEC reporting and reporting suspicious financial transactions.
Not stated here
The source does not say which "certain user data" is reported, who the other designated bodies are, or what other limited circumstances apply.
Examples of possible emergencies: child safety, missing persons, self-harm, imminent violence and disasters
All emergency disclosure requests are assessed case by case by the law enforcement response team on their particular circumstances. The source lists examples that may constitute an emergency: child safety and exploitation, missing persons, suicide and self-injury, imminent threats of violence (including terrorism), and natural or man-made disasters such as fires, floods or earthquakes.
Details not recorded for this card
Supporting quotations
All emergency disclosure requests undergo a case-by-case assessment and each request will be evaluated by our law enforcement response team based on its particular circumstances. However, the following are some examples that may constitute an emergency:
Cases of child safety and exploitation;
Missing persons;
Suicide and self-injury scenarios;
Imminent threats of violence (including terrorism); or
Natural or man-made disaster situations (such as fires, floods, earthquakes, etc).
Qualifications & exceptions
The examples "may constitute an emergency"; each request is judged on its own circumstances.
Not stated here
The source does not say that any listed scenario automatically qualifies.
Account & Service Control · Context
A TikTok username appears on the profile page below the profile photo
The FAQs say a TikTok username can be found on a user's profile page, below their profile photo, shown as @xxxxxx.
Details not recorded for this card
Supporting quotations
A TikTok username can be found on a user's profile page, below their profile photo, shown as @xxxxxx.
Legal Rights & Agreement Rules · Procedure
Law enforcement in any country can submit a request, but disclosure requirements vary with user and requester location
Law enforcement authorities in any country can submit a request to TikTok U.S. The requirements for disclosing data vary with the location of the user, the location of the requesting authority and, in certain cases, the type of data requested. In certain circumstances TikTok U.S. will tell the requesting authority that a request through the Mutual Legal Assistance Treaty (MLAT) process is necessary to obtain the data.
Details not recorded for this card
Supporting quotations
While law enforcement authorities in any country can submit a request to TikTok U.S, the requirements for data disclosure will vary depending on the location of the user, the location of the requesting law enforcement authority and, in certain cases, the type of data requested. In certain circumstances, TikTok U.S will communicate to a law enforcement authority that a request via the Mutual Legal Assistance Treaty process (known as “MLAT”) is necessary to obtain disclosure of the requested data.
Qualifications & exceptions
Requirements depend on the user's location, the requester's location and, "in certain cases", the data type.
Not stated here
The source does not list the different requirements for different countries or data types.
Legal Rights & Agreement Rules · Context
An MLAT is a treaty under which one government asks another for help getting information from companies
The FAQs describe an MLAT as a treaty between two or more countries that defines how each will assist in legal matters such as criminal investigations. Through an MLAT, the government of one country can ask the government of another country for help in obtaining information from companies located in the other country.
Details not recorded for this card
Supporting quotations
An MLAT is a treaty between two or more countries that defines how each will assist in legal matters, such as in criminal investigations. Through an MLAT, the government of one country can seek assistance from the government of another country in obtaining information from companies located in the other country.
Legal Rights & Agreement Rules · Procedure
MLAT may be needed when the requester is in another country than the TikTok entity; TikTok will say if it fits
Relying on MLAT may be necessary where the requesting law enforcement authority is in a different country from the TikTok entity that provides the service to the relevant user. A requester unsure whether to rely on MLAT can contact TikTok. On receiving such a request, TikTok will endeavour to tell the authority whether MLAT is appropriate and to direct it to the designated central authority for MLAT purposes in the appropriate country.
Details not recorded for this card
Supporting quotations
It may be necessary in circumstances where the requesting law enforcement authority is located in a different country to the TikTok entity that provides the service to the relevant user
If law enforcement are unclear as to whether they should rely on MLAT, they can contact TikTok.
On receipt of such a request, TikTok will endeavour to communicate to the law enforcement authority whether MLAT is appropriate and to direct them to the designated “central authority” for MLAT purposes in the appropriate country.
Qualifications & exceptions
"May be necessary" and "will endeavour": neither a guarantee that MLAT is required nor that TikTok will always answer.
Not stated here
The source does not say how a requester contacts TikTok about MLAT.
Legal Rights & Agreement Rules · Procedure
Requests from non-law-enforcement people go elsewhere, such as the content reporting and copyright or trademark reports
Non-law-enforcement requests should go to other channels. Reports of content that may breach TikTok's Community Guidelines follow the reporting steps TikTok links. Reports of alleged copyright or trademark infringement follow TikTok's Intellectual Property Policy and can be filed as a Copyright Infringement Report or a Trademark Infringement Report.
Details not recorded for this card
Supporting quotations
Non-law enforcement requests should be directed as follows:
Report Content: Details of how to report various types of content that may be in breach of TikTok
Report IP infringement: Reports of alleged copyright or trademark infringement should be made in accordance with TikTok
Not stated here
The linked reporting pages, Community Guidelines and Intellectual Property Policy are not supplied here, so what they say or require cannot be stated.
Legal Rights & Agreement Rules · Company practice
TikTok U.S. endeavours to respond in a timely manner but gives no response time; time-sensitive requests should say so
The response team endeavours to respond to all requests in a timely manner, but response times vary, in particular with caseload volume at the time and the complexity of the request. If a request is time-sensitive, the requesting officer is asked to note this and explain why. Longer response times can be expected where a request does not meet the requirements in the Guidelines and FAQs.
Details not recorded for this card
Supporting quotations
dedicated law enforcement response team endeavours to respond to all requests in a timely manner but response times can vary in particular due to the caseload volume at a given time and the complexity of a request.
If a particular request is time-sensitive, we would ask the requesting law enforcement officer to note this in the request (explaining the reasons).
Longer response times can be expected where the request does not meet the requirements set out in our
Qualifications & exceptions
"Endeavours": no guaranteed response time.
Not stated here
No target or maximum response time is stated.
Legal Rights & Agreement Rules · Procedure
Follow-up requests after an NCMEC Cybertip report must meet the same requirements and give the report number
If law enforcement has received a Cybertip report that TikTok U.S. made to NCMEC and then asks for further user data for an investigation, the request must meet the requirements in the Guidelines and the FAQs. To help TikTok U.S. process the request more efficiently, the request should state the report number NCMEC assigned to the Cybertip report.
Details not recorded for this card
Supporting quotations
If law enforcement has received a Cybertip report made by TikTok U.S to NCMEC, and is now requesting further user data in connection with an investigation, the request must meet the requirements set out in our
To help us more efficiently process your request, please specify in your request the report number assigned to the Cybertip report by NCMEC.
Qualifications & exceptions
The report number is requested to help efficiency, not stated as a condition of acceptance.
Not stated here
The source does not say what a Cybertip report contains or whether any user data accompanies it.