TikTok implies it’s collecting users' faceprints and voiceprints
New privacy policy gives the app permission to collect biometric data from users
TikTok has informed US-based users that it's now harvesting more personal information from them, likely including "faceprints and voiceprints."
"We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your User Content, the company's new privacy policy states. "Where required by law, we will seek any required permissions from you prior to any such collection."
This potentially important change was first spotted by TechCrunch, which noticed a few intriguing updates to TikTok's privacy policy.
Under the new policy, TikTok may collect information about images and audio in users' content, the policy says, "such as identifying the objects and scenery that appear, the existence and location within an image of face and body features and attributes, the nature of the audio, and the text of the words spoken in your User Content."
This type of language may sound invasive, but this kind of legal language is fairly common for photo and video apps.
More important is the statement about collecting "biometric identifiers." It doesn't specify what TikTok plans to do with this data or whether it's taking into account federal or state laws or both.
This comes only a few months after TikTok settled a $92 million lawsuit where it was accused of collecting biometric data from users without their consent.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
The lawsuit accused the social media platform of deploying a complex artificial intelligence (AI) system to scan for facial features in users' videos, alongside algorithms to identify a user's age, gender and ethnicity.
The accusers claimed that TikTok's app extracted a broad array of such data without consent and shared personal and private viewing histories with third parties, such as Facebook and Google.
Also of concern was the potential for this data to be shared with companies based in China, as the lawsuit claims TikTok doesn't adequately disclose how it shares user data with entities outside the US.
-
The modern workplace: Standardizing collaboration for the enterprise IT leaderHow Barco ClickShare Hub is redefining the meeting room
-
CISA’s interim chief uploaded sensitive documents to a public version of ChatGPT – security experts explain why you should never do thatNews The incident at CISA raises yet more concerns about the rise of ‘shadow AI’ and data protection risks
-
AI is “forcing a fundamental shift” in data privacy and governanceNews Organizations are working to define and establish the governance structures they need to manage AI responsibly at scale – and budgets are going up
-
26% of privacy professionals expect a “material privacy breach” in 2026 as budget cuts and staff shortages stretch teams to the limitNews Overworked, underfunded privacy teams are being left hung out to dry by executives
-
EU lawmakers want to limit the use of ‘algorithmic management’ systems at workNews All workplace decisions should have human oversight and be transparent, fair, and safe, MEPs insist
-
Data (Use and Access) Act comes into forcenews Organizations will be required to have an effective data protection complaints procedure and fulfil new requirements for online services that children are likely to use
-
UK businesses patchy at complying with data privacy rulesNews Companies need clear and well-defined data privacy strategies
-
Data privacy professionals are severely underfunded – and it’s only going to get worseNews European data privacy professionals say they're short of cash, short of skilled staff, and stressed
-
Four years on, how's UK GDPR holding up?News While some SMBs are struggling, most have stepped up to the mark in terms of data governance policies
-
Multicloud data protection and recoverywhitepaper Data is the lifeblood of every modern business, but what happens when your data is gone?