Investigation into TikTok's Failure to Improve Data Privacy Protection

[Asia Economy Reporter Buaeri] It has been found that the investigation into the personal information leakage of the Chinese application 'TikTok,' conducted by the government, has made no progress for four months. Concerns are rising that during the delay in the investigation, the personal information of domestic TikTok users is at risk of being exposed without protection.

The Korea Communications Commission detected the possibility of personal information leakage from 'TikTok' and began a full-scale investigation from November last year by requesting cybersecurity threat-related data from TikTok's local Singapore subsidiary (refer to our December 30, 2019, front page).

A KCC official said on the 24th, "It seems the investigation will take more time," adding, "TikTok is submitting data little by little, but we have not received sufficient materials. Usually, overseas operators submit data slowly for various reasons, unlike domestic operators."

If overseas operators like 'TikTok' do not actively cooperate with the investigation, the government has no proper solution. While fines can be imposed if overseas operators outright refuse to submit data, if they submit insufficient data multiple times creating an 'ambiguous situation,' the only option is to keep requesting additional data. Due to such tactics by overseas operators, investigations can be delayed for over a year.

As the government's investigation is delayed, concerns are raised that the risk of personal information leakage for domestic TikTok users continues to grow. Since sanctions cannot be imposed on TikTok based solely on circumstantial evidence without investigation results, this is particularly worrying given that the main user group is teenagers, whose information is highly likely to be leaked.

According to TikTok's service terms, personal information such as SIM card data and IP addresses may be automatically leaked without the consent of legal guardians. Under the current Information and Communications Network Act, internet service providers must obtain consent from legal guardians to collect children's personal information. In this regard, the U.S. Federal Trade Commission (FTC) imposed a fine of $5.7 million on TikTok for illegal collection of children's personal information.

Song Hee-kyung, a member of the National Assembly's Science, Technology, Information and Broadcasting Communications Committee from the Future United Party, said in a call, "If there is a problem, the government should directly step in and negotiate with the Chinese government," criticizing the government's complacent attitude by saying, "The entire government responds to fake news, but why has the TikTok issue been held up for four months?"