security

Congress calls TikTok CEO’s security and privacy assurances “worthless” – Ars Technica


TikTok Chief Executive Officer Shou Zi Chew testifies before the House Energy and Commerce Committee.
Enlarge / TikTok Chief Executive Officer Shou Zi Chew testifies before the House Energy and Commerce Committee.

For nearly five hours, Congress members of the House Committee on Energy & Commerce grilled TikTok CEO Shou Zi Chew over concerns about the platform’s risks to minor safety, data privacy, and national security for American users.

“The American people need the truth about the threat TikTok poses to our national and personal security,” committee chair Cathy McMorris Rodgers (R-Wa.) said in her opening statement, concluding that “TikTok is a weapon.”

Rodgers suggested that even for Americans who have never used the app, “TikTok surveils us all, and the Chinese Communist Party (CCP) is able to use this as a tool to manipulate America as a whole.”

In his testimony, Chew defended TikTok’s $1.5 billion solution to these concerns, Project Texas, as a more appropriate measure than forcing a sale of TikTok from its owner, China-controlled ByteDance, or banning TikTok in the US. Chew said that with Project Texas, TikTok has launched an “unprecedented” effort to be more transparent about its algorithm and data collection than any other big tech company.

“American companies don’t have a good track record with data privacy,” Chew reminded the committee while repeatedly telling Congress members that the questions that they had about TikTok reflected industry-wide problems that go well beyond one app.

Chew also said that he’s seen “no evidence” that Project Texas—which he said would ensure TikTok data is behind a US firewall and out of China’s reach—doesn’t address Congress’ national security concerns. However, he refused to comment on a whistleblower report from Tech Workers Coalition, where a TikTok content moderator confirmed one of Congress’ worst suspicions: that ByteDance has access to user data that could be used to track and spy on Americans.

But Congress members like Jay Obernolte (R-Calif.)—who said he has more extensive experience with Internet technologies than many of his committee colleagues—led a swarm of Congress members disputing that Project Texas was the cure-all that Chew claimed. Obernolte said that, in his opinion, it was not “technically possible” for Project Texas to keep American user data out of China’s reach. Not only could nefarious actors working within Project Texas potentially access user data for China, but also there are concerns that if TikTok is not fully transparent about its data sales, China could potentially purchase US user data.

Readers Also Like:  Wawa in Philly’s Headhouse Square to close - The Philadelphia Inquirer

Because The Wall Street Journal reported that China has stated that it will act to stop the forced sale of TikTok, Chew was pressed on how involved China—and the CCP—might be in TikTok operations and whether he thought China had the power to stop a sale. Chew did not directly deny that China could step in.

After being called “evasive” during his testimony by several committee members, Chew shared some insights into TikTok-China connections, confirming that he directly reports to China-owned ByteDance’s CEO Liang Rubo and affirming that he personally owns shares in ByteDance. Although Chew said that ByteDance does not require that employees disclose this information, he also seemed to agree that it’s likely that many ByteDance employees are CCP members.

Things got personal for Chew—who lives in Singapore, not China—when Congress members pressured him to disclose his own connections to the CCP, which he repeatedly evaded. He reminded the committee that his testimony was exclusively about TikTok. He also consistently resisted responding to several committee members asking if he condemned Chinese human rights abuses against a Turkish ethnic minority in China, the Uyghurs.

“You have absolutely tied yourself in knots to avoid criticizing CCP’s treatment of Uyghurs,” Kelly Armstrong (R-ND) told Chew.

Nothing that Chew said seemed to weaken the bipartisan united front against TikTok that was presented by committee members.

Rick Allen (R-Ga.) pointedly said that Chew gave him “no reason to believe” that TikTok would comply with any American orders that conflict with what the CCP wants. Although Chew continually denied that the CCP controlled TikTok—while remaining vague on many other questions—Diana Harshbarger (R-Tenn.) said it was clear to her that “ByteDance puts China first and America last.” Jan Schakowsky (D-Ill.) told Chew that because the WSJ report said that China’s commerce minister has confirmed that China could block a sale of TikTok, “all of what you’ve been saying about the distance between TikTok and China has been said to be not true.”

There were many questions that Chew failed to answer, promising instead to follow up. Committee members were given 10 business days to submit written questions to TikTok. Outstanding questions covered everything from how (and to whom) TikTok sells user data, to how much TikTok revenue ByteDance retains, and how many tech resources are shared between TikTok and other ByteDance-owned companies.

Readers Also Like:  Plans to redefine extremism would include ‘undermining’ UK values

In his written testimony that was prepared ahead of the hearing, Chew maintained that “ByteDance is not an agent of China” and made four promises to both Congress and to American TikTok users. He vowed to keep user safety as a top priority, to prevent unauthorized foreign access to American user data, to prevent any government from manipulating TikTok content, and to be transparent and accountable for all these promises by giving access to independent third-party monitors to review changes in TikTok code.

But after Chew provided his first testimony ever to Congress, Marc Veasey (D-Texas) told Chew that he considered TikTok’s assurances “worthless.”

Perhaps Russ Fulcher (R-Idaho) summed up the disappointing hearing best when he told Chew, “This hasn’t been a fun day” for TikTok or for Congress.

TikTok did not respond to Ars’ request for comment on the hearing.

Where does regulating TikTok go from here?

During the hearing, Congress members referenced various bills that could force TikTok to change how it operates. Some members asked Chew if TikTok would commit to meeting their bills’ requirements before laws were passed. For the most part, Chew evaded these requests.

Partly because of strong bipartisan opposition to TikTok, Wired reported that Chew was doomed to fail before the hearing even started.

But it remains unclear if TikTok will face a US ban because of the failure. The Electronic Frontier Foundation (EFF) media relations director, Josh Richman, told Ars that the US government has not yet provided evidence that a ban is justified and that a ban would likely be defeated by a First Amendment challenge in court.

After the hearing, Sens. Mark Warner (D-Va.) and John Thune (R-SD)—sponsors of the RESTRICT Act, which would grant US Commerce Secretary Gina Raimondo the power to ban TikTok on personal devices to protect national security—issued a joint statement. They said that “nothing we heard” from Chew today “assuaged” national security concerns, while suggesting that their bill “will comprehensively address the ongoing threat posed by technology from foreign adversaries,” such as TikTok.

Readers Also Like:  Japan May Start Controversial Fukushima Water Release Next Month - Slashdot

“It is vital for Congress to establish a process to review and mitigate the harms posed by foreign technology products that come from places like China and Russia,” their joint statement said. “We are encouraged by the quick momentum and strong bipartisan support for our legislation and expect that it will only grow following today’s testimony.”

EFF, however, has criticized the RESTRICT Act, saying that it “sets the stage for a TikTok ban” with many transparency issues that should concern Americans. Among those concerns, EFF said that “the executive branch need not publicly explain a ban if doing so is not ‘practicable’ and ‘consistent with … national security and law enforcement interests’” and “any lawsuit challenging a ban would be constrained in scope and the amount of discovery.” EFF’s stance is that as long as the Biden administration fails to show that a TikTok ban would be “narrowly tailored,” the government “cannot use the threat” of a ban “to coerce” the sale of TikTok from ByteDance.

The better solution, according to EFF and several House committee members during the hearing, is comprehensive data privacy legislation that would prevent platforms like TikTok from gathering sensitive user data in the first place.

“If China wanted to buy this data, it could probably find a way to do so,” EFF staff attorneys wrote in a blog. “Banning TikTok from operating here probably would not stop China from acquiring the location data of people here.”

Last year, a bipartisan data privacy bill died in Congress, but some Congress members are still rallying for similar legislation to be passed. The author of that missed-opportunity bill, committee ranking member Frank Pallone (D-NJ), said during the hearing that Americans are “powerless” without comprehensive data privacy legislation that ensures that companies minimize data collection and provide consumers with meaningful control over their personal information.

“A data privacy bill is the only way to stop TikTok,” Rodgers said, saying that a ban could only be a short-term solution.



READ SOURCE

This website uses cookies. By continuing to use this site, you accept our use of cookies.