The TikTok saga: Everything you need to know - CNET

The US government has cracked down on TikTok after a long buildup of warning shots.

On Friday, the Commerce Department announced that it is prohibiting certain transactions involving TikTok, the popular short-video app, effective Sunday, Sept. 20. The directive applies as well to the messaging app WeChat

Commerce Secretary Wilbur Ross cited the potential threat posed by the apps to US national security and to the US economy. "At the President's direction, we have taken significant action to combat China's malicious collection of American citizens' personal data," Ross said in a statement.

The announcement came just days after ByteDance, the Chinese company that owns TikTok, had selected Oracle to be its "trusted technology provider" in the US, though it wasn't clear what the deal meant in detail. The proposed deal was expected to meet the needs of TikTok's users, as well as satisfy American national security concerns, according to a person familiar with the situation.

Oracle confirmed the agreement in a brief statement Monday, saying that it was part of a proposal ByteDance had submitted to the government for review over the weekend. There had been some expectation that the deal might be approved.

TikTok's US operations have faced significant pressure from President Donald Trump, who has targeted the app since early July. US Secretary of State Mike Pompeo had earlier said Trump was considering a ban because the app could make US user data accessible to the Chinese government. The administration then focused on forcing a sale of the app to a US company. Software giant Microsoft and Walmart had pursued an acquisition, but weren't chosen by ByteDance.

A deal to sell TikTok's US business, prompted by two orders issued by Trump, had already hit a roadblock because of new Chinese export regulations covering artificial intelligence The South China Morning Post reported that ByteDance has decided not to include the algorithm in any sale. Beijing also had indicated it preferred to see the short-form video app shutter its US operations because a forced sale could make China look weak, according to a Reuters report. 

An Aug. 6 executive order bars American companies from doing business with ByteDance or its subsidiaries, and was set to effectively ban TikTok on Sept. 20. Following a US government panel's recommendation, Trump issued an Aug. 14 order that sets a Nov. 12 deadline for a sale of TikTok. The second order also directs ByteDance toTrump had also mentioned a Sept. 15 deadline in several press briefings. 

It's unclear how the proposed deal with Oracle or the Commerce Department's action might affect a lawsuit TikTok filed against the US government over Trump's actions. TikTok's lawsuit alleges the US government didn't allow it to respond to the national security concerns cited as the reason for the potential ban. The company has repeatedly said it doesn't share user data with the Chinese government, one of the main concerns brought up by the Trump administration. In the lawsuit, TikTok noted that outside experts have expressed doubts the US government is truly acting out of concerns over access to user data.

TikTok employees are separately suing on the grounds the order would deprive them of their livelihoods. The employees have signed up prominent internet lawyer Mike Godwin to represent them. The Justice Department says the claim isn't sufficient to stop the government's action and that it didn't intend to prevent TikTok employees from being paid. 

Rising concerns about TikTok's ability to access the personal data of US users come as TikTok sees its popularity explode. The app has gotten a new boost from the COVID-19 pandemic, drawing in people looking to escape the boredom of lockdown. It's been downloaded more than 2 billion times, according to research firm Sensor Tower, with 623 million downloads during the first half of this year. India had been its largest market, followed by Brazil and the US.

The US isn't alone in worrying about the app. India has already banned TikTok, and Australia is also considering blocking it. Trump cited the India ban in his executive order. (Softbank Group, a Japanese stakeholder in TikTok parent company ByteDance, is leading negotiations to buy the short-video app's assets in that country, according to a report from Bloomberg.)

Meanwhile, TikTok is searching for a new CEO after Kevin Mayer left the job in August because the political environment changed the nature of his role at the company. Instagram co-founder and its former CEO Kevin Systrom has talked to TikTok about the CEO job, The New York Times reported. TikTok and Systrom didn't immediately respond to a request for comment.

Here's what you need to know about the political backlash against TikTok.

Now playing: Watch this: Why the US might try to ban TikTok

6:28

Why is the Trump administration worried about TikTok?

TikTok has drawn the attention of the Trump administration, as well as other parts of the government, because of concerns it scoops up information on Americans that could be turned over to the Chinese government. The US Army and Navy have banned service members from downloading the app to government-issued phones. Both the US House of Representatives and the Senate have voted to prohibit the use of TikTok on all government-issued phones. Two senators have also requested the Department of Justice open an investigation of TikTok, as well as videoconferencing app Zoom. 

The concern stems in part from the perceived inability of Chinese companies to reject requests from China's ruling Communist Party to access user data. China critics often cite a 2017 law that requires Chinese companies and citizens to comply with all matters of national security. TikTok says all US user data is stored in the US, with a backup in Singapore. TikTok also says none of its data is subject to Chinese law. 

The statements didn't satisfy the Trump administration.

"TikTok automatically captures vast swaths of information from its users, including internet and other network activity information such as location data and browsing and search histories," the president's initial executive order reads. "This data collection threatens to allow the Chinese Communist Party access to Americans' personal and proprietary information -- potentially allowing China to track the locations of Federal employees and contractors, build dossiers of personal information for blackmail, and conduct corporate espionage."

TikTok's access to US users' data may well be worth investigating. There'll always be concerns when apps from foreign companies collect large amounts of user data, said tech policy expert Betsy Cooper, director of the Aspen Policy Hub.

But, she added, "it's unclear how much effort the administration will put into actually investigating the seriousness of the specific security concerns with the app versus using this as a threat for broader geopolitical leverage." 

Intelligence agencies have determined Chinese authorities could collect data through TikTok, but there is no evidence they've done so, according to The New York Times. The Wall Street Journal found that the TikTok app for Android surreptitiously collected device identifiers known as MAC addresses, though the practice ended in November. (TikTok told the Journal that it's committed to the privacy and safety of its users.)

What has TikTok done to address those concerns?

The company's blog post following the initial executive order spells out TikTok's objections. 

"We have made clear that TikTok has never shared user data with the Chinese government, nor censored content at its request. In fact, we make our moderation guidelines and algorithm source code available in our Transparency Center, which is a level of accountability no peer company has committed to," TikTok said. "We even expressed our willingness to pursue a full sale of the US business to an American company."

TikTok has emphasized its ties to the US and its independence from China. On July 29, then-CEO Kevin Mayer, an American, promised more transparency around how the app works, including making its algorithm available to experts. He called on other companies to do the same thing. (Mayer has since stepped down.)

Following comments by Trump on July 31 about a TikTok ban, the company proposed selling the US operations to an American company. That would put the data of TikTok's US users in the hands of a domestic company. 

Still, the far-flung people who create videos on the app are clearly nervous about its future. Many are encouraging their followers to migrate with them to other platforms, such as YouTube and Facebook-owned Instagram. Instagram recently launched a new feature, called Reels, designed to compete with TikTok and attract creators. (TikTok trolled Instagram with a well-timed tweet on the day of the launch.)

What 'TikTok transactions' are being prohibited?

In its Sept. 17 announcement, the Commerce Department imposed two sets of restrictions. In the first, which takes effect on Sept. 20, the US is prohibiting any service "to distribute or maintain" TikTok through an app store in the US. That essentially would mean an end to downloads of the app. In the second, set to take effect Nov. 12, the restrictions will prohibit actions "enabling the functioning or optimization" of TikTok by internet hosting services, content delivery networks and internet transit or peering services in the US. That seems likely to pull the rug out from under TikTok apps already downloaded onto phones.

The prohibitions may be lifted, the agency said, if the president's national security concerns are resolved by Nov. 12.

Can the US make ByteDance sell its US operations?

A government panel called the Committee on Foreign Investment in the United States reviews investments by foreign companies in the US for national security risks. If it sees a red flag, the president can block the deal or ask for changes to it.

The CFIUS panel was investigating TikTok because ByteDance got its foothold in the US by purchasing Musical.ly in 2017 for $800 million. That business was subsequently rebranded as TikTok and became the sensation that swept up US teens. The CFIUS investigation of TikTok was first reported in November 2019.

"Today the President issued an order prohibiting the transaction that resulted in the acquisition of Musical.ly, now known as TikTok, by the Chinese company ByteDance," Treasury Secretary Steve Mnuchin, who chairs the panel, said in a statement after the second order. "The order directs ByteDance to divest all interests and rights in any assets or property used to enable or support the operation of TikTok in the United States, and any data obtained or derived from TikTok or Musical.ly users in the United States."    

There's recent precedent for Chinese companies selling off sections of their businesses. In March, Chinese company Kunlun agreed to sell its controlling stake in gay dating app Grindr after the committee raised national security concerns.

(If you're super interested in CFIUS, the law firm Latham & Watkins has a detailed guide available here.)

Will Trump's actions take away TikTok? 

The government could require Apple and Google to pull TikTok from their app stores if a sale doesn't happen. But the companies would likely put up a fight. (Apple and Google didn't respond to requests for comment on the initial executive order.)

"The tech community will be very hesitant to go along with this app ban," said Wayne Lam, an independent technology analyst. "It sets a precedent for the government to ban other apps or even for other global apps to be inaccessible to the US market."

Even if the app does disappear from app stores, users can install apps on Android devices without downloading them from the Google Play Store, said Carolina Milanesi, a tech analyst at Creative Strategies. 

"I don't know at that point how you police that," Milanesi said.

The government also can't make a specific app illegal for everyday folks to use, said Kurt Opsahl, general counsel at the Electronic Frontier Foundation, an advocacy group.

"There is no law that would authorize the federal government to ban ordinary Americans from using an app," he said.

The US can't keep the app from working on the internet, which some other countries can do, said Arturo Filasto, a co-founder of the Open Observatory of Network Interference. "There is no central place where you can go to and implement a unified filtering strategy, like there is in places like China and Iran," Filasto said.

The government could order all ISPs in the country to block the app, but there's no guarantee that TikTok wouldn't find a way to get around those blocking efforts, Filasto said.

The US Department of State recently unveiled an initiative dubbed  Clean Network that's designed to protect individual and corporate privacy. The program includes provisions to remove from US stores any apps that "threaten our privacy, proliferate viruses, and spread propaganda and disinformation."