Key Takeaways:
• TikTok has engaged a 2,000 strong team to manage data security and content under its US subsidiary, TikTok US Data Security Inc.
• The subsidiary has complete oversight of U.S. user data.
• Transparency centers have been set up globally for external review of TikTok’s source code and algorithms.
• Despite reassurances, concerns persist over access to U.S. data by Chinese staff.
TikTok, amid rising concerns over its access to American user data, has laid down the facts regarding its commitment to securing user information. Looking to put all worries to rest, the social media giant has revealed that it entrusts its data security and content moderation tasks to a dedicated US subsidiary managed by over 2,000 employees. The dedicated subsidiary, conveniently named TikTok US Data Security Inc., or USDS for short, takes the reins when it comes to guarding protected U.S. user data.
The Scope of U.S Data Security Inc.
The newly formed USDS is tasked with managing trusted U.S. user data exclusively on the Oracle Cloud infrastructure. Only personnel with the necessary approvals from USDS get to access this data, ensuring its safety from unauthorized users.
Unveiling the Dedicated Transparency Centers
To further display TikTok’s commitment towards transparency, the company has set up five Dedicated Transparency Centers (DTCs) across the globe. These centers, situated across the United States, United Kingdom, and Australia, facilitate the examination of TikTok’s software infrastructure by Oracle and Independent Security Inspectors. The analyst teams at these centers, totaling over a hundred heads, continuously review and audit TikTok’s platform controls.
A closer look at the DTCs
At these transparency centers, the external parties are granted access to examine TikTok’s source code. This includes a deep dive into the algorithms that power TikTok’s recommendation system. There’s no secrecy with TikTok as the first transparency center began operations two years ago in Columbia, Maryland. It continues to be operational today with Oracle constantly inspecting TikTok’s code.
The Review Process in Detail
When we talk about reviews at these centers, they encompass four main areas: TikTok’s recommendation algorithms, its mobile app code, backend services, and third-party library integrations. Once reviewed, Oracle’s build pipeline then converts the source code into the mobile application. This creates a direct and verifiable link between the examined code in the DTCs and the version that goes live on U.S. app stores.
Security Measures at Transparency Centers
These transparency centers operate under stern security protocols. They include constant round-the-clock monitoring, access control systems, and dedicated security staff competent at their roles. High-tech measures such as data loss prevention tools and traffic monitoring systems ensure the security of the proprietary code and other sensitive information during reviews.
Continuous Access by Oracle
Oracle enjoys continuous access to TikTok’s system to review its functioning including its recommendation system and algorithms. This allows the tech giant to verify TikTok’s commitment to its users by inspecting its content surfacing mechanisms.
TikTok’s Claim
Despite these measures, the big question stands – Is TikTok’s user data secure? The company, in their statement, assures, “TikTok has gone further than any other platform in protecting U.S. user data.” However, it’s vitally important to remember that during a 2023 Senate hearing, TikTok CEO Shou Zi Chew did confess that Chinese staff had access to U.S. user data, although he insisted that such data will never be shared with the Chinese government.
There’s more drama to this saga. Oracle is reportedly in talks to acquire a stake in TikTok’s global operations, a deal potentially worth tens of billions. And while all of this unfolds, Google and Apple have yet to welcome TikTok back into their online stores.
Despite security boost attempts by TikTok, only time will tell if their efforts stand up to scrutiny and regain user and government trust.
