![]() | |
Long title | An Act to protect the national security of the United States from the threat posed by foreign adversary controlled applications, such as TikTok and any successor application or service and any other application or service developed or provided by ByteDance Ltd. or an entity under the control of ByteDance Ltd. |
---|---|
Enacted by | the 118th United States Congress |
Announced in | the 118th United States Congress |
Effective | April 24, 2024 |
Citations | |
Public law | U.S. Public Law 118-50 |
Statutes at Large | 138 Stat. 955 |
Codification | |
U.S.C. sections created | 15 U.S.C. § 9901 |
Legislative history | |
| |
United States Supreme Court cases | |
|
The Protecting Americans from Foreign Adversary Controlled Applications Act (PAFACA), signed into law on April 24, 2024, bans social networking services within 270 days if the president deems them a "foreign adversary controlled application," with a possible 90-day extension. The act explicitly applies to ByteDance Ltd. and its subsidiaries particularly TikTok with the company to become compliant by January 19, 2025. It ceases to be applicable if the foreign adversary controlled application is divested and no longer considered to be controlled by a foreign adversary.
PAFACA was introduced as H.R. 7521 during the 118th United States Congress by representatives Mike Gallagher and Raja Krishnamoorthi, following years of various attempts by federal lawmakers to ban TikTok in the country. A modified version was passed by the House on April 20, 2024 as a rider to a foreign aid package, which was then passed by the Senate on April 23.
Critics of the act say a forced sale under the threat of a ban may be a violation of the First Amendment or motivated by political opinions regarding the Israel–Hamas war, and that a comprehensive privacy legislation would be more appropriate than singling out TikTok. ByteDance filed a lawsuit against the legislation on May 7, 2024. The District of Columbia Circuit Court of Appeals found the law to be constitutional, the ruling was later upheld by the Supreme Court, upheld the earlier TikTok shuttered its site on January 18, 2025, Google and Apple removed it from their app stores the following day. Donald Trump signed an executive order on January 20, 2025 following his inauguration, delaying the enforcement of PAFACA for at least 75 days.
TikTok had more than 150 million monthly users in the United States as of March 2023. [1] The company has come under scrutiny since 2020, with American national security officials and lawmakers warning that its parent ByteDance's ties to China are national security risks and the Chinese government could access TikTok data to spy on Americans. There is no public evidence to show that American user data has already been accessed by the Chinese government. [2] [3]
In May 2019, President Donald Trump issued Executive Order 13873 that declared a national emergency related to the security of U.S. supply chains for information and communications technology and services (ICTS), and Trump subsequently issued Executive Order 13942 in August 2020 to augment the previous executive order under the International Emergency Economic Powers Act (IEEPA) by directing the Secretary of Commerce to restrict TikTok's U.S. operations. [4] [5] TikTok and ByteDance filed a lawsuit against Executive Order 13942 that argued that it exceeded the statutory authority delegated under the IEEPA, and the court ruled in favor of the companies and issued a preliminary injunction in the case that barred the executive order from being enforced. [6] [7] In 2019, the Committee on Foreign Investment in the United States (CFIUS) conducted a retroactive national security review and investigation of ByteDance's acquisition of musical.ly (which ByteDance subsequently merged with TikTok) and referred the transaction to Trump for a presidential decision–which indicated that CFIUS could not mitigate identified national security risks arising from the transaction. [8] [9]
In August 2020, Trump issued a divestment order under section 721 of the Defense Production Act of 1950 (DPA) in response to the CFIUS review that required ByteDance to sell assets that support TikTok operations in the United States and U.S. user data obtained through TikTok and musical.ly, which TikTok and ByteDance challenged in a lawsuit under the Due Process Clause and Takings Clause of the Fifth Amendment and the Administrative Procedure Act. [10] [11] Before the injunction in the Executive Order 13942 lawsuit was scheduled to expire in June 2021, President Joe Biden rescinded Executive Orders 13873 and 13942 under Executive Order 14034, and the lawsuit against Executive Order 13942 was voluntarily dismissed by the parties. [6] Executive Order 14034 more broadly required the Secretary of Commerce to identify and address national security risks from foreign internet and software based applications operating in the United States, [7] but left the national emergency declaration and the DPA divestment order in place. [10]
In January 2021, the Commerce Department issued an interim final rule and request for comments under Executive Order 13873 for ICTS supply chains that Executive Order 14034 expanded, and the Commerce Department issued a final rule for ICTS supply chains in June 2023. [12] However, as of September 2023, the Commerce Department had not blocked any transactions under the ICTS supply chain rule and had only invoked the rule to subpoena China-based companies providing ICTS in the United States. [13] Following the presidential transition of Joe Biden, the companies and the government filed a joint request in the DPA divestment order case for it to be held in abeyance while the parties attempted to negotiate a mutual agreement that the court granted in February 2021 and required the government to file status reports on the negotiations every 60 days. [10] [11] In December 2022, the No TikTok on Government Devices Act signed into law by Biden as part of the Consolidated Appropriations Act, 2023 required the Office of Management and Budget (OMB) to establish deadlines and develop guidelines for federal executive agencies to remove TikTok from all U.S. government computers and information technology that OMB issued in February 2023. [14]
In March 2024 the Office of the Director of National Intelligence (ODNI) said TikTok accounts from China "reportedly targeted candidates" during the 2022 United States elections and that China using TikTok to influence the 2024 United States elections could not be ruled out. [15] [16] Other members of the US law enforcement and intelligence communities have said China can leverage user data for influence operations and that TikTok can spy on users' activities. [17] [18] [19] [20] United States Secretary of State Antony Blinken stated that TikTok should be "ended one way or another". [21]
China has said that any divestment of TikTok would need to comply with Chinese export regulations. [22] A former Trump official said ByteDance is required to follow the 2017 National Intelligence Law and that even after divestment, TikTok would still need to scrub its source code. [23] The Commerce Department has asserted that ByteDance has close ties to the Chinese Communist Party (CCP) and had signed an agreement with the public relations bureau of the Ministry of Public Security in 2019. [24] In 2021 WangTouZhongWen Technology, aided by the China Internet Investment Fund, acquired a 1% golden share and board seat in a ByteDance subsidiary that owns TikTok's technology. [25]
In 2021 research conducted by the Citizen Lab found no overt data transmission from TikTok to the Chinese government or servers in China but did not rule out that non-China servers could relay the data. [26] [18] [27] Based on leaked materials, BuzzFeed News reported in June 2022 that ByteDance employees in China had repeatedly accessed American user data. [28] [29] [30] ByteDance eventually dismissed four employees (two in China and two in US) who had accessed the user data of at least two journalists in order to find the sources of the leak. [31] [32]
Cybersecurity studies have shown that TikTok similar amounts of data as its competitors. [33] [34] [35] [36] In 2023, Forbes reported that the Taxpayer Identification Numbers including Social Security numbers of American content creators and businesses being paid by TikTok were stored in China and accessible by ByteDance employees there, [37] and a company software hosting internal TikTok information seen by Forbes had been inspected by Chinese cybersecurity agents ahead of the 20th National Congress of the CCP. [38] A former executive suing ByteDance for wrongful dismissal alleged that its internal CCP committee was granted access to the user data of pro-democracy activists in Hong Kong in 2018, [39] while another lawsuit in December 2019 alleged that user data was harvested and sent to servers located in China. [40]
TikTok and ByteDance have acknowledged that their policies in 2019 and 2020, no longer applicable globally, could be used to suppress topics politically sensitive in China and other countries but claimed that this was done to "[minimize] conflict on the platform". [41] [42] In November 2023, members of the U.S. Intelligence Community and an Australian Strategic Policy Institute researcher raised concerns that TikTok and other social media platforms can be used by the CCP and the Chinese government to shape political narrative. [43] [44]
Observers have argued that the national security concerns raised are largely hypothetical. [45] [46] [47] There is insufficient public evidence to show that American user data has been accessed by or shared with the Chinese government, [48] [49] [33] with some claims reportedly exaggerated. [50] Biden himself was on TikTok as the president, while Trump has reversed his previous position. [51] Lawmakers against the bill said the process was quickly rushed. [52] [53] [54] According to computer security specialist Bruce Schneier, which company owns TikTok may also be irrelevant, as Russia interfered in the 2016 US elections using Facebook without owning it. [55]
TikTok said the company takes regular action against covert influence networks and has "more than 150 elections globally" behind it. [15] ByteDance is incorporated in the Cayman Islands, while TikTok Inc. is incorporated in California and Delaware [25] [49] and says 60% of ByteDance is owned by global institutional investors. [56] In response to lawmaker concerns about data privacy, TikTok began an initiative called "Project Texas" to locally store all American data monitored by employees of the Oracle Corporation. [57] [58]
In 2023, an apparent spike in pro-Palestine content appeared on TikTok following the Israeli bombing of the Gaza Strip in response to the Hamas-led attack on Israel. [59] [60] Representative Mike Gallagher (R-WI) decried "rampant pro-Hamas propaganda on the app" in his push for a ban. This was echoed by senators Josh Hawley and Marco Rubio. [59] [60] Gallup polling data going back to 2010 shows that younger Americans, who are more likely to use TikTok, show greater sympathy for Palestine than Israel. [60] [61]
The company also denied intentionally boosting pro-Palestine hashtags, saying regions such as the Middle East and South East Asia account for a significant proportion of its user views and content, and it is easy to cherry pick hashtags to fit certain narratives. Some for example may have fewer videos but receive more views, or be much older than newer tags. [60]
PAFACA prohibits the distribution, maintenance, or updating of "foreign adversary controlled applications" by web hosting services and app stores unless the application's owners execute a "qualified divestiture" within 270 days of the application being designated as a foreign adversary controlled application. [62] [63] [64] This effectively bans affected services from the U.S. market. [65] [66] [67] While TikTok and the applications of ByteDance and its subsidiaries are explicitly designated as foreign adversary controlled applications under the law, [68] applications owned and operated by other companies may be designated if:
The president may grant a one-time extension of the divestiture deadline by as long as 90 days if a path to a qualified divestiture has been identified, "significant" progress has been made to executing the divestiture, and legally binding agreements for facilitating the divestiture are in place. [62] [70] For divestitures to qualify under PAFACA, the President must determine through an interagency process that the application is no longer controlled by, or has no operational relationship with, a foreign adversary after the transaction is completed, and restrictions under the law cease to apply upon completion of the transaction. [62] [71] [65] However, PAFACA does not require the owners of designated applications to execute a qualified divestiture. [72] Before the divestiture deadline, the company that owns the designated application must provide users their data from the service at their request and in a machine readable format. [62] [70] Web hosting services and app stores that do not comply with the restrictions on distribution, maintenance, and updating of designated applications are subject to civil penalties of $5,000 per U.S. user that accesses, maintains, or updates the application, while the owners of designated applications are subject to civil penalties of $500 per U.S. user that is not provided their data as required by the law. [62] [70]
The Attorney General is authorized under PAFACA to investigate potential violations of its terms and, upon determination of violations, to bring lawsuits in United States district courts for either the law's civil penalties or for declaratory or injunctive relief, but PAFACA does not clearly specify what actions the Attorney General may take to enforce the law by administrative proceedings. [73] [72] Under PAFACA, petitions for review challenging the law itself or determinations made under the law may only be filed with the United States Court of Appeals for the District of Columbia Circuit. [74] [75] Other bills in the 118th United States Congress had proposed removing exceptions under the International Emergency Economic Powers Act that allowed Executive Order 13942 to be successfully challenged in court, with some authorizing, in addendum to removing the IEEPA exceptions, for the executive branch to impose visa restrictions on the employees of companies that owned the designated applications, to require U.S. nationals employed by the companies to register as foreign agents under the Foreign Agents Registration Act, or the specific power to prohibit transactions with companies that knowingly provide the user data of persons within U.S. jurisdiction to China. [76] [4] [77]
One bill would have authorized the creation of a new system to review transactions for national security risks by directing the President to create and maintain a list of "untrustworthy applications and social media entities" and by requiring the Federal Communications Commission to issue rules prohibiting app stores and internet service providers from supporting the applications. [78] [76] The proposed RESTRICT Act would have explicitly authorized review for information and communications technology and services transactions separate from the Commerce Department's ICTS supply chain rule created under the IEEPA, and would have created a separate process similar to the Committee on Foreign Investment in the United States to review foreign adversary holdings in ICTS companies. [79] [12] Other proposals involved expanding data privacy frameworks or cross-border data transfers that would restrict TikTok's data collection. [80] [63]
On March 7, 2024, the House Energy and Commerce Committee, to whom the bill had been referred, voted unanimously to report the bill favorably and without amendment. [81] On March 13, PAFACA was passed by the House of Representatives. [82] The vote was 352 to 65, with 50 Democrats and 15 Republicans voting against the bill. [83]
On April 20, 2024, the House passed a foreign aid package (H.R. 8038), the 21st Century Peace through Strength Act, as part of Public Law 118-50. The bill incorporates a modified version of PAFACA, with the time allowed for a sale to complete increased from 180 days to a minimum of 270 days. By bundling a potential TikTok ban or divestment with foreign aid, which has traditionally enjoyed bipartisan support in both chambers, the House pressured the United States Senate to act quickly with a combined vote, because rewriting the bill to exclude the provisions on TikTok would delay foreign aid. [64] [84]
Senator Rand Paul opposed the bill on First Amendment grounds and said he would hold it. [85] His opposition prevented a similar bill (S. 85) from proceeding in 2023 but was not expected to be able to stop the foreign aid package. [85] [86] On April 23, 2024, the Senate passed the law, which included the 21st Century Peace through Strength Act along with three other bills, 79–18. [87] Regarding the potential of a political backlash, then Senate Majority leader Chuck Schumer told reporters that House Republicans jammed the TikTok amendment into the $95 billion foreign aid package that could no longer wait and had to be "passed as quickly as possible". Republican political strategists pointed to the large Democrat following on TikTok and said that Biden, who signed the bill, will likely take the brunt of any blame. [88]
TikTok and ByteDance spent millions on lobbying against the bill. [89] [90] Several civil liberties and digital rights advocacy organizations also lobbied against it, including the American Civil Liberties Union, the Electronic Frontier Foundation, the Knight First Amendment Institute, Fight for the Future, the Center for Democracy & Technology, Freedom of the Press Foundation, the Asian American Federation, Access Now, the Chinese Progressive Association, FreedomWorks and PEN America. [91] Groups lobbying for the bill included the Foundation for Defense of Democracies, State Armor Action, the Heritage Foundation, Americans for Prosperity, the American Principles Project, Hadassah and the Anti-Defamation League. Other industry and advocacy groups that reportedly lobbied for or against the bill included Oracle, Google, LinkedIn, Lenovo, Dell Technologies, the NCTA, the Competitive Carriers Association, and Issue One. [92]
Before the vote, TikTok had been encouraging users to call representatives with a full-screen notification about the upcoming bill, causing many congressional offices to be inundated with calls. [93] [94] During the House debate, various lawmakers mentioned the pop-up stating that the app was forcing its users to call their representative. [95] [96] The United States House Select Committee on Strategic Competition between the United States and the Chinese Communist Party stated that TikTok's push for users to contact lawmakers may have been illegal and called for the Federal Trade Commission to investigate. [97]
On March 11, 2024, former president Donald Trump denounced the bill, claiming that it would give too much power to Facebook and its owner Meta. [98] [99] Despite Trump denouncing the bill, many of his political allies voted in favor of it. [100] Other supporters of a ban included hedge fund manager Bill Ackman and former Facebook executive Samuel Lessin. [101]
Shortly after the House of Representatives vote, a spokesperson for China's Foreign Ministry said the bill was putting the U.S. on "the opposite side of the principle of fair competition and international economic and trade rules." [93] Representatives from the Chinese embassy met with U.S. congressional staffers to lobby against the legislation. [102] Sources told The Wall Street Journal that the Publicity Department of the Chinese Communist Party instructed the country's state media outlets to increase positive coverage of ByteDance, although Beijing's overall response appeared to be muted. [103]
Some TikTok creators mobilized against the legislation. [104] Individuals interviewed by CNN reacted negatively to the bill. [46] [105] North Carolina Representative Jeff Jackson, who had grown a large following on TikTok, voted in favor of the bill, [106] leading to backlash from users on the app. As a result of the backlash Jackson lost approximately 200,000 followers. [107] [108] He later released an "apology video". [109]
Advocates and experts have called for Congress to pass comprehensive privacy legislation, rather than a bill focused mostly on TikTok. [105] Jameel Jaffer of the Knight First Amendment Institute said Congress can address the problems associated with TikTok "without restricting Americans' access" to it by "passing a comprehensive privacy law". Evan Greer of the digital rights advocacy group Fight for the Future called for "strong privacy legislation to protect our data from all Big Tech companies" and governments. [105] Justin Sherman, an adjunct professor at Duke University, said that TikTok's ownership by ByteDance "should prompt real national security questions" but "the US also needs comprehensive privacy and cybersecurity regulations for all companies." Critics of the legislation have outlined that American platforms such as Facebook and Twitter have been targeted by foreign influence operations, including by the Chinese government, in the recent past. As lawmakers focused their attention on TikTok, Facebook began allowing political ads again that questioned the 2020 U.S. presidential election results. [105]
A group of free speech and civil rights petitioners including the ACLU argued that the government "cannot accomplish indirectly what it is barred from doing directly". A potential ban to force a sale may violate the First Amendment, including prohibiting app stores from carrying TikTok, if the threat to national security does not justify such measures or if they are ineffective at addressing the underlying security concerns. [91]
House Majority Leader Steve Scalise reportedly pressured K Street lobbyist groups with ties to TikTok/ByteDance to disassociate from the company, under threat of investigation by the House Select Committee on the Chinese Communist Party and prohibition from holding future meetings with congressional offices. On May 9, 2024, trade association NetChoice removed TikTok (which the firm had represented since 2019) as a member, after previously defending it in other efforts to ban or force divestiture of the platform. (Four days earlier, NetChoice filed an amicus brief requesting that the Ninth Circuit Court of Appeals uphold an injunction against Montana SB 419, a 2023 law that sought to ban TikTok from operating in the state, which was blocked by U.S. District Court Judge Donald Molloy in November 2023 before it was enacted.) [110] [111]
Some opponents to the bill stated that the renewed momentum for a ban stemmed from a belief that the unpopularity of Israel and the United States during the ongoing Israel–Hamas war grew because of TikTok, although evidence for that belief is unclear. [101] [112] The Jewish Federations of North America expressed support for the proposed ban ahead of the House vote, stating that "social media is a major driver" of increased antisemitism in the United States and that "TikTok is the worst offender by far." [113] Sandra Tamari of Adalah said that if antisemitism was a concern, supporters of the TikTok ban would have also focused on X, which has many anti-Jewish conspiracies. The real reason, according to Tamari, is because "they don't have control over TikTok", which has allowed Palestinian voices to be heard directly. [114]
Edward Ahmed Mitchell, the national deputy director of the Council on American-Islamic Relations, said it would be "hypocritical for politicians" to restrict access to TikTok because of people expressing their support for Palestinian human rights on a platform that is less restrictive of such views, adding that young people have become more sympathetic to the Palestinians after getting information from outside of mainstream media. [59]
In May 2024, Senator Mitt Romney and House Representative Mike Lawler (both of whom backed the legislation) indicated that the PAFACA's passage was motivated by scrutiny from lawmakers supportive of Israel to criticism of both the Israel–Hamas war, and the Israel and United States governments' handling of the conflict, blaming TikTok in particular and social media more generally for shaping public opinion against Israel and contributing to protests opposing the war. Such claims spurred criticism from free speech and civil liberties advocates that the bill was intended as an implicit act of viewpoint discrimination prohibited by the First Amendment. [115] [116] [117]
TikTok and ByteDance filed suit against the U.S. government on May 7, 2024, a few weeks after the bill was passed. TikTok argued the bill interfered with free speech rights. [118] [119] [120] Due to the timeline for divestment in January 2025, the lawsuit was placed on an accelerated schedule in the Court of Appeals for the District of Columbia Circuit [121] as well as by the Supreme Court. [122] Observers believe the court would likely uphold the law. [123] [124] The Court issued its per curiam decision upholding the constitutionality of the law on January 17, 2025. [125]
Senator Ed Markey introduced legislation after the oral arguments and before the deadline to extend the deadline for ByteDance and TikTok to comply with the law by 270 days, giving time for the Supreme Court to reach its decision and allow the companies to determine future plans if necessary. [126]
On January 16, 2025, a Biden administration official stated that it would forego any decision on whether to enforce the ruling to the incoming second Trump administration, which takes office on January 20. [127]
ByteDance opted to shutter TikTok and remove it from app stores on January 18, 2025, though stated in a message to users that they expect this to be a temporary outage pending Trump taking office. [128] Oracle Corporation, which provides web services for TikTok, reportedly sought confirmation that the incoming administration would sign an executive order about the ban before restoring its services. [129] Some TikTok users reported that they still could not access their accounts by using a virtual private network. [130] The shutdown extended to CapCut, Lemon8, and Marvel Snap , all of which had ties to ByteDance. [131]
Trump affirmed on January 19, 2025, that he will issue an executive order to extend the deadline for ByteDance to seek a buyer once he was in office, [132] which led to TikTok to restore service the same day with the assurances that Trump will not seek prosecution of app store providers. [133] Trump suggested that the U.S. government may arrange to have a 50% ownership of TikTok, which would satisfy the ownership concerns of PAFACA, though would raise issues around moderation and the First Amendment. [134] Trump signed the executive order on January 20 following his inauguration, delaying the enforcement of PAFACA for at least 75 days for his administration and promising immunity for companies that provided services to TikTok during that time. [135] TikTok and other ByteDance apps remained unable to be downloaded from app stores in the aftermath of the ban, [136] [137] until being restored in mid-February. [138]
ODNI alleges that "TikTok accounts run by a PRC propaganda arm reportedly targeted candidates from both political parties during the U.S. midterm election cycle in 2022,"...To date, there have been no concrete examples publicly provided showing how TikTok poses a national security threat, though lawmakers on the House Energy and Commerce Committee received a closed-door hearing last Thursday from ODNI, the FBI and the Department of Justice.
Those concerns remain largely hypothetical. TikTok is owned by Chinese tech giant ByteDance, yet there is no publicly available evidence that government officials have ever influenced what Americans see on the app, nor any proof that officials in China have spied on U.S. citizens through TikTok.
Cybersecurity experts say that the national security concerns surrounding TikTok remain a hypothetical—albeit concerning—scenario. US officials have not publicly presented evidence that the Chinese government has accessed the user data of US TikTok users. ... a strain of fear and racism, echoing many other Asian-Americans who have looked on with growing alarm. Creators interviewed by CNN say they have not personally viewed any content on TikTok that could be described as Chinese propaganda, however. Multiple creators say the House bill ... would almost certainly disrupt the organic communities they've built.
To date, the U.S. government also has not provided any evidence that shows TikTok shared such information with Chinese authorities.
Some of the evidence may also be of dubious provenance—as Wired reported recently, a TikTok whistleblower who claims to have spoken with numerous politicians about a potential ban may have overstated his role at the company and offered numerous improbable claims about its inner workings.
The problem with TikTok isn't related to their ownership. In 2016 Russia did this with Facebook and they didn't have to own Facebook—they just bought ads like everybody else. Trump signed a covert action order authorizing the CIA to use social media to influence and manipulate domestic Chinese public opinion and views on China.
The Communist Party's propaganda department, which regularly sends reporting guidelines to state-owned media outlets, recently instructed such media to amp up their reporting on TikTok's U.S. woes in favor of ByteDance, according to people familiar with the matter.