US drops Trump order targeting TikTok, plans its own review

In revoking some of President Donald Trump's blanket-style orders against Chinese tech companies and replacing them with a narrower approach, the Biden administration has not actually weighed in yet on whether TikTok and other apps pose a danger to Americans.

But a senior administration official said Wednesday that the Trump actions weren't "always implemented in the soundest fashion" and the aim of the review is to set up clear criteria to evaluate specific data security and privacy risks for each app. He said that could lead to a range of potential future actions on an app-by-app basis.

"We want to take a tailored, tough approach here," he said.

The department will also make recommendations on how to further protect Americans' genetic and personal health information, and will address the risks of certain software apps connected to China or other adversaries, according to senior administration officials.

TikTok on Wednesday declined to comment. WeChat did not respond to a request for comment.

The Trump administration's attempted bans didn't hold up legally as courts blocked them, and also "ran up against this critique that they were mimicking China's Great Firewall," said Samm Sacks, a fellow at Yale Law School's Paul Tsai China Center. "What the Biden administration wants to do is maintain an open, secure internet that doesn't take a page from Beijing's playbook, while addressing legitimate risk."

The Biden administration's move reflects ongoing concern that Americans' personal data could be exposed by popular apps tied to China, a chief U.S. economic and political rival. The White House and Congress have both taken action to address Beijing's technological advancement.

The Biden administration last week expanded a Trump-era list of Chinese companies that Americans can't invest in because of purported links to the Chinese military and surveillance. Companies on the list include China's state-owned telecommunications companies, telecom equipment maker Huawei and Chinese oil company China National Offshore Oil Corp.

On Tuesday, the Senate passed a bill that aims to boost U.S. semiconductor production and the development of artificial intelligence and other technology in the face of growing international competition. The bill would also ban the federal government's use of Chinese-made drones.

The new executive order should lead to a framework for protecting Americans' data from China, rather than targeting specific companies, and could pressure Congress to enact a data-security law in the years ahead, said Paul Triolo, a tech policy expert at the Eurasia Group consultancy.

Courts had blocked the Trump administration's efforts last year to ban TikTok, a video app widely popular with young people, and messaging service WeChat, but a national-security review of TikTok by a government group called the Committee on Foreign Investment in the United States, or CFIUS, is ongoing. CFIUS had set deadlines for TikTok to divest its U.S. operations, but such a sale never happened.

Last year, the Trump administration brokered a deal that would have had U.S. corporations Oracle and Walmart take a large stake in the Chinese-owned app on national security grounds. Oracle didn't returned requests for comment on Wednesday. Walmart declined to comment.

The Biden administration earlier this year had backed off President Donald Trump's attempts to ban TikTok and WeChat as it reviewed national security threats posed by Chinese technology companies. The U.S. Court of Appeals for the District of Columbia Circuit has put on hold a case challenging Trump's TikTok divestment order.

A cybersecurity and privacy analysis of TikTok published in March by the internet watchdog group Citizen Lab found no evidence of malicious behavior and said TikTok's practices of collecting personal data and analyzing users' behavior were no worse than other major social platforms such as Facebook.

"Our research shows that there is no overt data transmission to the Chinese government by TikTok," the report said. It added that TikTok's service did not contact any servers within China, but it was still theoretically possible that servers outside China could later transfer user data to China-based servers.

Citizen Lab, based at the University of Toronto, also described a "plausible" though speculative scenario in which the Chinese government could use one of its national security laws to force TikTok's parent company, ByteDance, to turn over user data, but said there's no evidence China has yet exerted such pressure on the company.

____

O'Brien reported from Providence, Rhode Island, and Arbel from New York.