TikTok settles for $92m after being accused of harvesting biometric data
Users had accused the social media platform of scanning their videos for facial features and sharing data with third-parties
TikTok owner ByteDance has proposed a $92 million (roughly £65.7 million) settlement to a class-action lawsuit after the social media platform was accused of collecting the biometric data of its users.
The lawsuit accused the social media platform of deploying a complex artificial intelligence (AI) system to scan for facial features in users’ videos, alongside algorithms to identify a user’s age, gender and ethnicity.
The accusers claim that TikTok’s app extracted a broad array of such data without consent, while information such as personal and private viewing histories was shared with third-parties such as Facebook and Google.
Also of concern is the potential for this data to be shared with companies based in China, given the lawsuit claimed TikTok doesn’t adequately disclose how user data is shared with entities outside the US.
The settlement, if accepted by a judge, would require TikTok to establish a compensation scheme for its users in addition to launching a ‘privacy compliance’ training programme.
“This settlement is important for many reasons,” said co-lead counsel Katrina Carroll, arguing on the side of the class-action lawsuit.
“First, it provides compensation for TikTok users, but equally as important, it ensures TikTok will respect its users’ privacy going forward. Social media seems so innocuous, but troubling data collection, storage, and disclosure can happen behind the scenes. This settlement sets out to prevent that.”
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
The path to CX excellence for B2B services
The four stages to thrive in the experience economy
Co-lead counsel Beth Fegan argued that biometric information is mong the most sensitive of private information because it’s unique and permanent. Therefore, she added, it’s critical that Tiktok users’ privacy is protected against “underhanded attempts at theft.”
TikTok denied any privacy violations following the accusations and has maintained that there was no wrongdoing on its part.
“While we disagree with the assertions,” a spokesperson told the Wall Street Journal (WSJ), “rather than go through lengthy litigation, we’d like to focus our efforts on building a safe and joyful experience for the TikTok community.”
The firm had previously been under fire for a now-rectified vulnerability in its platform that exposed data belonging to its users. According to Check Point Research, if left unpatched, the vulnerability would’ve enabled hackers to access a user’s phone number, nickname, profile and avatar pictures, unique user IDs, as well as certain profile settings.
Keumars Afifi-Sabet is a writer and editor that specialises in public sector, cyber security, and cloud computing. He first joined ITPro as a staff writer in April 2018 and eventually became its Features Editor. Although a regular contributor to other tech sites in the past, these days you will find Keumars on LiveScience, where he runs its Technology section.