TikTok: A Threat to US National Security

TikTok CEO Shou Zi Chew Testifying before Congress. (Source: C-SPAN)

Issue: TikTok is a powerful tool for manipulating mass sentiment in the hands of a company that actively cooperates with and is subject to the coercive power of the Chinese Communist Party (CCP). The CCP has the intent and capability to, as well as a history of, manipulating information on a mass scale. The Party’s ability to leverage TikTok directly for its own ends distinguishes the platform from the platform’s US-based social media rivals. TikTok and its parent company, ByteDance, have no practical means, legal or otherwise, to resist the CCP’s pressure. Only solutions that separate the company from the CCP will protect US national security.

 Key Points:

  • ByteDance is a company domiciled in the People’s Republic of China (PRC) with its own party committee and is tied to the party-army-state, to which it has a host of obligations and is subject to strong coercive state power.
  • The CCP has the intent and capability to, as well as a history of, trying to manipulate narratives and information to undermine adversaries and achieve strategic advantages.
  • TikTok is responsible for and capable of manipulating sentiment on a mass scale. The social media platform—and conceivably other PRC apps, including mobile games and e-commerce platforms—can be used to intentionally manipulate how people feel. This could influence US citizens’ views on topics based on the CCP’s preferences.
  • TikTok may have acted illegally in its handling of users’ data and conducted other malicious activities, such as tracking journalists. Leaks have highlighted the lack of separation between ByteDance and TikTok at the operational level.

ByteDance actively collaborates with and is closely tied to the CCP’s security apparatus. Both PRC law and the CCP’s extralegal coercion compel cooperation with the government. ByteDance operates under the stringent whole-of-society surveillance and control mechanisms imposed by the Party, which are manifested through laws that enforce cooperation with state intelligence operations.

  • ByteDance has signed a strategic cooperation agreement with the Ministry of Public Security. TikTok’s parent company has committed to helping improve content planning to provide specialized support for public security accounts. This effort is designed to strengthen the influence and credibility of public security communications, including by maximizing the reach of public security-related content.[1] ByteDance has been involved in such activities in Xinjiang.[2]
  • ByteDance has integrated PRC cyber police into their platforms to censor content. Content reported by the cyber police under the Ministry of Public Security is prioritized in a specialized review queue. Users can also directly report inappropriate content to the cyber police. ByteDance’s party secretary previously expressed a desire to work similarly with the majority of other government agencies.[3]
  • ByteDance must conform to PRC national security laws. Since 2014, Beijing has issued new laws and amendments on counterespionage, data security, state secrets, cybersecurity, and personal information protection that establish expectations for PRC companies and individuals to support the regime operationally.[4] The 2021 Data Security Law mandates a centralized system for data security, with a global reach affecting PRC companies and their overseas subsidiaries, to assess and monitor security risks. Article 7 of the 2018 National Intelligence Law prohibits companies from withholding data from state intelligence agencies.[5] Articles 28 and 69 of the 2016 Cybersecurity Law stipulate that individuals and organizations have the responsibility and obligation to maintain national security. This requires network operators to provide technical support and assistance for the activities of public security and national security organs.[6] The Central State Security Commission is enshrined as the ultimate authority over data security policy and strategy in the PRC in the Data Security Law and Personal Information Protection Law.[7]
  • CCP presence on ByteDance’s board entails party intervention in its operations. This presence comes via the PRC government’s “golden share”—a 1 percent ownership stake assigned to a fund connected to the PRC’s Internet oversight authority.[8] This arrangement includes a board seat for a government official, allowing for direct influence over ByteDance’s operations, including critical aspects such as corporate governance and the management of TikTok’s algorithm.[9]
  • A party committee micromanages ByteDance’s operations and decision-making. ByteDance established an internal party branch in 2014 and a party committee in 2017. Through these bodies, it has engaged in activities to reinforce party loyalty among its members, including oath-taking ceremonies where employees swear to uphold and never betray the Party’s agenda.[10] Zhang Fuping, secretary of the company’s party committee, has committed to working with government agencies.[11] He has emphasized the importance of the party committee taking a proactive and elevated role in oversight, ensuring that algorithmic decisions are in accordance with Xi Jinping Thought and promote “socialist core values.”[12]

The CCP has the intent and capability to, as well as a history of, manipulating narratives and the information environment to support its objectives. A clear strategy aims to shape public opinion and suppress information that could challenge the Party’s narrative.

  • The CCP pursues comprehensive control over media, public discourse, and the Internet within, and increasingly, beyond China’s borders. The CCP contends that controlling information through data manipulation, content restriction, and bot sharing on social media is key to modern cognitive warfare.[13]
  • The CCP employs a complex approach to global information control via governmental departments and military strategies. For instance, state-sponsored hackers and the PLA execute operations ranging from overt propaganda to covert interference in foreign affairs using advanced technologies for subliminal messaging, deep fakes, and sentiment analysis and manipulation across major social platforms.[14] The State Council’s News Center and Douyin have jointly signed a cooperation memorandum to optimize short video dissemination for state-owned enterprises and promote the Belt and Road Initiative through creating positive public opinion.[15]
  • CCP efforts to influence the information environment include the selective shadow banning of content that portrays the PRC negatively and the posting of content that portrays the PRC positively. A recent report analyzing hashtags on Instagram and TikTok concluded that TikTok “systematically promotes or demotes content on the basis of whether it is aligned with or opposed to the interests of the Chinese Government.”[16] TikTok has blocked accounts, including that of 17-year-old Feroza Aziz, who posted a video to raise awareness of human rights violations in Xinjiang, and former NBA player Enes Kanter Freedom, for the same reason.[17] In the early days of the George Floyd protests in 2020, the platform suppressed certain hashtags. Following a public backlash, this decision was reversed, but reinstated later on.[18] Company documents showed that moderators were told to censor political speech in livestreams and punish those who harmed “national honor” while padding feeds with content from “shadow accounts” operated by company employees posing as regular users.[19] TikTok also hosts ads from state media outlets, in violation of its stated policy to “not show political or election ads on the platform.”[20]
  • The CCP has publicly forced ByteDance to conform to its censorship preferences. Zhang Yiming, ByteDance’s founder, issued a famous apology for inappropriate content appearing on a company platform. He promised improvements by reinforcing party-building work in the company. Zhang outlined plans to correct the algorithm and expand the content review team from 6,000 to 10,000 staff members to ensure content aligned with socialist values. Zhang also invited National People’s Congress delegates and members of the Chinese People’s Political Consultative Conference to supervise content.[21]

TikTok is responsible for and capable of manipulating sentiment on a mass scale. A leaked internal study from Facebook (now Meta) in 2017 demonstrated that social media platforms can be used to covertly manipulate how people feel. TikTok has approximately 170 million active users in the United States, and a significant portion of adults use TikTok as their primary source of news. The CCP appears to have succeeded in some cases in using TikTok to improve perceptions of the PRC.

  • Party members have repeatedly spoken about using TikTok to improve perceptions of the PRC. This includes using the platform to “construct the Party’s image,”[22] “fight the war of public opinion well,”[23] and “precisely grasp the cognitive orientation of target users/audiences while sympathetically communicating the concept of shaping the community of human destiny.”[24] The People’s Daily, the CPP’s mouthpiece, has declared that TikTok should be a “megaphone” for “telling China’s stories and spreading China’s voice.”[25]
  • Studies have shown that the most-viewed China-related TikToks portray the country in a positive or neutral way.[26] A researcher at the Chinese Academy of Social Sciences has emphasized that platforms like TikTok should “subconsciously complete the questioning of the negative propaganda of the West” and that TikTok in particular should create an “awakening.”[27] In 2023, TikTok users in Taiwan were more likely than non-users to agree with arguments that cast skepticism on the United States while also leaning toward the PRC’s political positions.[28]

TikTok may have acted illegally in its handling of users’ data and conducted other malicious activities. TikTok has reportedly broken laws in multiple jurisdictions and contradicted its own regulations. TikTok has already been banned entirely in countries across the world and from government devices specifically in almost all Western countries.

  • TikTok has been tracking users and storing users’ data in the PRC. Data has been used to track and identify protestors in Hong Kong, in some cases acquiring their SIM card identifications and IP addresses.[29] The company’s US- and PRC-based employees accessed users’ data to track journalists from Forbes and the Financial Times.[30] TikTok has stored financial data of some of its biggest stars on servers in the PRC.[31] Employees based in the PRC are widely known to have access to user data, according to leaked audio from company meetings, external auditors, and employee statements.[32] TikTok recruited “Overseas Review Managers” to censor content in the United States.[33] Some TikTok employees have been required to align their work day to Beijing’s time zone to accommodate ByteDance executives.[34] This accumulated evidence suggests that ByteDance remains in control of TikTok at the operational and technical levels.
  • The United Kingdom and the European Union have fined TikTok for misusing data. The European Union’s Data Protection Commission imposed a EUR345 million ($377 million) fine on TikTok over General Data Protection Regulation violations and issued an order requiring them to change its children’s data processing practices.[35] The European Union has more recently launched an investigation into “shortcomings in giving researchers access to TikTok’s publicly accessible data.”[36] The United Kingdom’s Information Commissioner’s Office also fined the company £12.7 million ($15.9 million) for violating the law protecting children’s data.[37]

Conclusion

Controlled by ByteDance and ultimately answerable to the CCP, TikTok has become a powerful tool to influence mass sentiment. While harder to prove that it has influenced the views of tens of millions of monthly active users in the United States due to the opacity of the platform’s recommendation algorithm, certain preconditions for doing so are clearly met. Beijing has signaled its intent to manipulate perceptions of the PRC on TikTok. The social media platform has previously admitted to and been found to have blocked accounts, shadow-banned content, and manipulated its platform in ways that serve the CCP’s interests.

The CCP values social media platforms, including TikTok and its domestic PRC-equivalent Douyin, as a strategic means to shape public opinion.[38] Various official and quasi-official PRC voices have repeatedly denounced the “Protecting Americans from Foreign Adversary Controlled Applications Act” which would force a sale of TikTok.[39] 

While the US Government need not reflexively oppose everything the CCP favors, the vehemence of these voices should make Americans ask why the CCP needs to maintain its ability to coerce and control TikTok. Mitigating this control goes beyond data and privacy protections, even assuming that those rules could be enforced without the Party’s collaboration with US authorities. Nor would any such protections help Americans or their government see when Beijing was actively manipulating TikTok to undermine US interests, democratic values, or American society.

The Party’s ability to leverage ByteDance and TikTok is the single most important feature that distinguishes the platform from US-based rivals Facebook, Instagram, and YouTube. Any solutions to the national security challenges posed by TikTok must separate the platform and its internal operations (e.g., algorithm, software development, key personnel, etc.) from the CCP’s ability to exploit them directly.

Notes

[1] Baijiahao, “Draw a Concentric Circle Online and Offline, With The National Public Security New Media Matrix Joining Toutiao and Douyin.”, April 25, 2019, https://archive.ph/xINbv#selection-161.0-161.28 .

[2] ABC, “Douyin’s Parent Company Cooperated with Chinese Authorities on Censorship and Propaganda.”, November 29, 2019, https://www.abc.net.au/chinese/2019-11-29/tiktok-huawei-surveillance-censorship-in-xinjiang-china-repo/11751744 .

[3] Baijiahao, “National Cyber Police Collectively Join Douyin, Marking the Entry of Police-Public Interaction into the Short Video Era.”, September 14, 2018, https://archive.ph/BS7qf#selection-161.0-161.22 .

[4] PRC Government, “PRC Counter-Espionage Law.”, April 26, 2023, https://www.gov.cn/yaowen/2023-04/27/content_5753385.htm ; People’s Daily “PRC State Secret Law.”, February 27, 2024, http://politics.people.com.cn/n1/2024/0227/c1001-40184585.html .

[5] PRC Government, “PRC Data Security Law.”, June 11, 2021, https://www.gov.cn/xinwen/2021-06/11/content_5616919.htm .

[6] MSS WeChat, “Interpreting the Four Notable Points of the Cybersecurity Law.”, March 17, 2024, https://mp.weixin.qq.com/s/JEgyzG0COWJsdh-0v91P5A .

[7] ASPI, “Mapping China’s Technology Giants: Supply Chains and the Global Data Collection Ecosystem.”, June 3, 2021, https://www.aspi.org.au/report/mapping-chinas-tech-giants-supply-chains-and-global-data-collection-ecosystem .

[8] YingQi, Lai, “Enhancing Control Capabilities: Mainland Government Reportedly Takes a Stake in Tencent, Alibaba through ‘Golden Shares’”, Yahoo News, January 12, 2023, https://archive.ph/i43SJ  

[9] Lingling, Wei, “China’s New Way to Control Its Biggest Companies: Golden Shares.”, The Wall Street Journal, March 8, 2023, https://www.wsj.com/articles/xi-jinpings-subtle-strategy-to-control-chinas-biggest-companies-ad001a63

[10]Wu, Qing, “The Party General Branch of the Central Party School Press and Publishing House and the Party Committee of ByteDance Company Jointly Organized a Themed Party Day Event.”, China National Radio, June 15, 2018, https://archive.ph/0x0sX .

[11] Baijiahao, “National Cyber Police Collectively Join Douyin, Marking the Entry of Police-Public Interaction into the Short Video Era.”, September 14, 2018, https://archive.ph/BS7qf#selection-161.0-161.22 .

[12] SINA, “ByteDance Party Committee: Priority Should be Given to Providing Guidance and Taking Responsibility.”, April 29, 2018, https://archive.ph/EJNyo#selection-671.0-671.18 .

[13] People’s Daily, “Xi Jinping’s Thoughts on Big Data.”, May 26, 2023, http://politics.people.com.cn/BIG5/n1/2023/0526/c1001-32695668.html ; Yuan Lai, Yu, “Social Cognition: A Key Lever in Cognitive Domain Operations.”, PLA’s Daily, September 22, 2022, https://archive.ph/gH5mM .

[14] Nathan Beauchamp-Mustafaga & Chase, Michael S., “Borrowing a Boat Out to Sea: The Chinese Military’s Use of Social Media for Influence Operations.”, Foreign Policy Institute, Johns Hopkins University, May 14, 2021, https://www.rand.org/pubs/external_publications/EP68633.html .

[15] SoHu, “The SASAC News Center and Douyin Sign Strategic Cooperation, with the First Batch of 25 Central Enterprises Moving In.”, June 1, 2018, https://archive.ph/Ke949 .

[16] The Network Contagion Research Institute, “A Tik-Tok-ing Timebomb: How TikTok’s Global Platform Anomalies Align with the Chinese Communist Party’s Geostrategic Objectives.”, December 21, 2023, https://networkcontagion.us/wp-content/uploads/A-Tik-Tok-ing-Timebomb_12.21.23.pdf .

[17] The Guardian, “TikTok Sorry for Blocking Teenager Who Disguised Xinjiang Video as Make-Up Tutorial.”, November 28, 2019, https://www.theguardian.com/technology/2019/nov/28/tiktok-says-sorry-to-us-teenager-blocked-after-sharing-xinjiang-videos ; Harwell, Drew, “Tiktok Admits It Banned Former NBA Player Critical of China.”, The Washington Post, March 24, 2023, https://www.washingtonpost.com/technology/2023/03/24/enes-kanter-freedom-nba-tiktok-ban/ .

[18] ASPI, “TikTok and WeChat: Curating and Controlling Global Information Flows.”, September 2020, https://s3-ap-southeast-2.amazonaws.com/ad-aspi/2020-09/TikTok%20and%20WeChat.pdf?7BNJWaoHImPVE.6KKcBP1JRD5fRnAVTZ .

[19] The Intercept, “Invisible Censorship: TikTok Told Moderators to Suppress Posts by ‘Ugly’ People and the Poor to Attract New Users.”, March 16, 2020, https://theintercept.com/2020/03/16/tiktok-app-moderators-users-discrimination/ .

[20] Forbes, “TikTok Has Pushed Chinese Propaganda Ads to Millions Across Europe.”, July 26, 2023, https://www.forbes.com/sites/iainmartin/2023/07/26/tiktok-chinese-propaganda-ads-europe/?sh=3313bfdf203d .

[21] Baidu, “Zhang Yiming Issues a Public Apology Letter: ‘Neihan Duanzi Has Taken the Wrong Path, and All Responsibility Lies With Me.’”, April 11, 2018, https://archive.ph/mRjKr#selection-161.0-161.25 .

[22] Foreign Propaganda, “The Shaping and Disseminating of Views on China of the International Gen-Z Group.”, October 2023, https://www.cdclib.org/libmag/detail.htm?i=3471&n=144&t=2 .

[23] UCASS, “Seminar on Mission and Action in the New Era of Cultivating International Communication Talents.”, December 10, 2023, https://media.ucass.edu.cn/info/1018/1689.htm .

[24] Shanghai Foreign Languages University, “From Soft Power to ‘Warm Power’: Discourse, Dimensions, and Prospects for China’s International Dissemination Concept Creation.”, July 20, 2023, https://news.shisu.edu.cn/research-/2/20230720/916.html .

[25] People’s Daily, “Making Short Video Platforms Show China’s Image Well and Promote China’s Voices.”, August 6, 2021, http://m2.people.cn/news/default.html?s=MV8wXzE1MTI5NzMxXzI1XzE2MjgxOTkyOTM=&from=sohu .

[26] Highhouse, Cole Henry, “China content on TikTok: The Influence of Social Media Videos on National Image.”, Online Media and Global Communication, Vol. 1, No. 4, 2022, pp. 697–722, https://doi.org/10.1515/omgc-2022-0057 .

[27] Marxism Research Net, “Xu Chengfang: Research on the Laws of Ideology Construction Under the Conditions of Long-Term Ruling of the Communist Party of China.”, January 17, 2024,  http://marxism.cass.cn/dsydj/202401/t20240117_5729402.shtml .

[28] IORG, “2023 General Research Results.”, January 19, 2024, https://iorg.tw/_en/r/2023 .

[29] Soo, Zen, “Former ByteDance Executive Says Chinese Communist Party Tracked Hong Kong Protesters via Data.”, AP News, June 7, 2023, https://apnews.com/article/tiktok-china-bytedance-user-data-d257d98125f69ac80f983e6067a84911 ; Wall Street Journal “Former ByteDance Executive Claims Chinese Communist Party Accessed TikTok’s Hong Kong User Data.”, June 5, 2023, https://www.wsj.com/articles/former-bytedance-executive-claims-chinese-communist-party-accessed-tiktoks-hong-kong-user-data-e9d5554f .

[30] Forbes, “Exclusive: TikTok Spied on Forbes Journalists.”, December 22, 2022, https://www.forbes.com/sites/emilybaker-white/2022/12/22/tiktok-tracks-forbes-journalists-bytedance/?sh=58f2efe27da5 ; The Guardian, “TikTok Admits Using Its App to Spy on Reporters in Effort to Track Leaks.”, December 23, 2022, https://www.theguardian.com/technology/2022/dec/22/tiktok-bytedance-workers-fired-data-access-journalists .

[31] Forbes, “TikTok Creators’ Financial Info, Social Security Numbers Have Been Stored in China.”, May 30, 2023, https://www.forbes.com/sites/alexandralevine/2023/05/30/tiktok-creators-data-security-china/?sh=56c2151b7048 .

[32] Buzzfeed, “Leaked Audio From 80 Internal TikTok Meetings Shows That US User Data Has Been Repeatedly Accessed From China.”, June 17, 2022, https://www.buzzfeednews.com/article/emilybakerwhite/tiktok-tapes-us-user-data-china-bytedance-access ; Forbes, “Security Failures at TikTok’s Virginia Data Centers: Unescorted Visitors, Mystery Flash Drives And Illicit Crypto Mining.”, April 21, 2023, https://www.forbes.com/sites/emilybaker-white/2023/04/21/security-failures-tiktok-virginia-data-centers-unescorted-visitors-flash-drives/?sh=bc077afeb6ef .

[33] Hu, Bi, “Former Sina Weibo Content Reviewer Interview: How the CCP Creates the Internet ‘Ministry of Truth,’” VOA, August 12, 2020, https://www.voachinese.com/a/internet-censorship-20200812/5540475.html .

[34] Rodriguez, Salvador, “Tiktok Insiders Say Social Media Company is Tightly Controlled by Chinese Parent ByteDance.”, CNBC, June 25, 2021, https://www.cnbc.com/2021/06/25/tiktok-insiders-say-chinese-parent-bytedance-in-control.html .

[35] Digital Policy Alert, “Ireland: Issued Data Protection Commission Ruling in Investigation into TikTok’s Children’s Data Processing Practices Compliance with GDPR.”, September 1, 2023, https://digitalpolicyalert.org/event/14418-issued-data-protection-commission-ruling-in-investigation-intotiktoks-childrens-data-processing-practices-compliance-with-gdpr .

[36] European Commission, “Commission Opens Formal Proceedings Against TikTok Under the Digital Services Act.”, February 19, 2024, https://ec.europa.eu/commission/presscorner/detail/en/ip_24_926 .

[37] ICO, “ICO Fines TikTok £12.7 Million for Misusing Children’s Data.”, April 4, 2023, https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2023/04/ico-fines-tiktok-127-million-for-misusing-children-s-data/ .

[38] Qiang, Sun Guo, “To Fully Promote Media Integration with Strong Political Commitment.”, PLA 81, March 18, 2024, https://archive.ph/mckFx#selection-379.0-379.16 ; Dai Feng & Haihua, Zhang, “In the Era of All Media: How Military Media Can Quickly Seize the TikTok Platform.”, PLA 81, March 18, 2024, https://archive.ph/knYfp#selection-375.0-375.20 .

[39] TikTok Comms, “TikTok CEO Shou Zi Chew has Called the Bill ‘Disappointing’ and Vowed to Fight it in the Courts.”, March 13, 2024, https://twitter.com/i/status/1768045785311035820 ; Foreign Ministry spokesperson Wang Wenbin (汪文斌) characterized the bill as bullying (霸凌)” and as “destroying the normal international economic and trade order (破坏的是正常的国际经贸秩序)” (FMPRC, March 13, 2024); Nationalist former Global Times editor Hu Xijin (胡锡进) has said written that “TikTok has called out to American public opinion: this bill is a ban through and through, and it is about taking away everyone’s freedom of speech (TikTok对美国舆论大声疾呼:这个法案就是彻头彻尾的一个禁令,就是要剥夺大家的言论自由)” (IFENG, March 8, 2024); and the PRC Ministry of Commerce and Ministry of Science and Technology have previously released a list of technologies that are restricted from being exported, which was released the day after it was announced a deal to sell TikTok could be announced imminently in 2020 (MOFCOM, December 21, 2023; OFWeek, August 31, 2020); Caixin Global, “ByteDance Holds Firm Against Selling TikTok Despite US Ban Threat.”, March 26, 2024, https://www.caixinglobal.com/2024-03-26/bytedance-holds-firm-against-selling-tiktok-despite-us-ban-threat-102179409.html .