TikTok's Collection and Storage of Biometric Data

TikTok updated its US privacy policy in June 2021 to disclose that it may collect biometric identifiers including 'faceprints and voiceprints' from user content. This disclosure triggered class-action lawsuits under Illinois' Biometric Information Privacy Act (BIPA), which requires informed consent before biometric data collection. According to court filings, TikTok's filters and effects use facial geometry mapping that constitutes biometric data under BIPA. TikTok agreed to a $92 million settlement in a consolidated BIPA class action. Reports indicated the collected biometric data could be used for content recommendation, ad targeting, and age estimation, though TikTok disputed some of these characterizations.

tiktok has been the subject of increasing scrutiny over its biometric storage practices. Privacy researchers and regulatory bodies across multiple jurisdictions have documented concerns about how the company handles user data, particularly regarding consent, transparency, and data minimization principles. The findings suggest a pattern of prioritizing business metrics over user privacy, a trend observed across the broader technology industry. Users affected by these practices have limited recourse without proactive intervention such as filing formal complaints with data protection authorities or submitting DSAR requests.

Regulatory responses have varied significantly. European data protection authorities have been more aggressive in enforcement under GDPR, while US enforcement remains fragmented across state-level privacy laws. The investigation highlights the need for stronger federal privacy legislation and more transparent corporate data practices. Affected users should consider reviewing their privacy settings, submitting data deletion requests, and exploring privacy-preserving alternatives recommended by independent researchers.