IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

TikTok implies it’s collecting users' faceprints and voiceprints

New privacy policy gives the app permission to collect biometric data from users

TikTok has informed US-based users that it's now harvesting more personal information from them, likely including "faceprints and voiceprints." 

"We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your User Content, the company's new privacy policy states. "Where required by law, we will seek any required permissions from you prior to any such collection."

This potentially important change was first spotted by TechCrunch, which noticed a few intriguing updates to TikTok's privacy policy.

Under the new policy, TikTok may collect information about images and audio in users' content, the policy says, "such as identifying the objects and scenery that appear, the existence and location within an image of face and body features and attributes, the nature of the audio, and the text of the words spoken in your User Content." 

This type of language may sound invasive, but this kind of legal language is fairly common for photo and video apps.

More important is the statement about collecting "biometric identifiers." It doesn't specify what TikTok plans to do with this data or whether it's taking into account federal or state laws or both.

This comes only a few months after TikTok settled a $92 million lawsuit where it was accused of collecting biometric data from users without their consent.

Related Resource

Cost of a data breach report 2020

Find out what factors help mitigate breach costs

cost of a data breach report 2020 - whitepaper from IBMDownload now

The lawsuit accused the social media platform of deploying a complex artificial intelligence (AI) system to scan for facial features in users' videos, alongside algorithms to identify a user's age, gender and ethnicity. 

The accusers claimed that TikTok's app extracted a broad array of such data without consent and shared personal and private viewing histories with third parties, such as Facebook and Google

Also of concern was the potential for this data to be shared with companies based in China, as the lawsuit claims TikTok doesn't adequately disclose how it shares user data with entities outside the US.

Featured Resources

Accelerating AI modernisation with data infrastructure

Generate business value from your AI initiatives

Free Download

Recommendations for managing AI risks

Integrate your external AI tool findings into your broader security programs

Free Download

Modernise your legacy databases in the cloud

An introduction to cloud databases

Free Download

Powering through to innovation

IT agility drive digital transformation

Free Download

Recommended

Review calls for urgent new laws over use of biometric technology
Policy & legislation

Review calls for urgent new laws over use of biometric technology

30 Jun 2022
TikTok phishing campaign tried to scam over 125 influencer accounts
social media

TikTok phishing campaign tried to scam over 125 influencer accounts

18 Nov 2021
A third of UK workers are surveilled by employers
privacy

A third of UK workers are surveilled by employers

8 Nov 2021
Facebook's Oversight Board demands more transparency
social media

Facebook's Oversight Board demands more transparency

21 Oct 2021

Most Popular

Actively exploited server backdoor remains undetected in most organisations' networks
cyber attacks

Actively exploited server backdoor remains undetected in most organisations' networks

1 Jul 2022
Macmillan Publishers hit by apparent cyber attack as systems are forced offline
Security

Macmillan Publishers hit by apparent cyber attack as systems are forced offline

30 Jun 2022
Former Uber security chief to face fraud charges over hack coverup
data breaches

Former Uber security chief to face fraud charges over hack coverup

29 Jun 2022