US user data is safe, TikTok CEO tells senators, amid fresh scrutiny over China tech giant's access

TikTok's CEO has written to nine Republican senators to outline new efforts by the popular video app to protect US user data, amid renewed congressional scrutiny of access to that information by employees of its Chinese parent company, ByteDance.

"We know we are among the most scrutinised platforms from a security standpoint, and we aim to remove any doubt about the security of US user data," Shou Zi Chew wrote in the letter, which was dated Thursday and obtained by The New York Times.

Steps taken by the company to address data security concerns included an initiative called "Project Texas", a series of protocols to restrict data access being created in coordination with the US government, Chew wrote.

Do you have questions about the biggest topics and trends from around the world? Get the answers with SCMP Knowledge, our new platform of curated content with explainers, FAQs, analyses and infographics brought to you by our award-winning team.

TikTok had not yet publicised the effort due to the confidentiality of its engagement with the US government, "but circumstances now require that we share some of that information publicly", wrote Chew.

US President Joe Biden last year revoked an executive order by his predecessor that would have paved the way for banning TikTok and Chinese messaging app WeChat. His administration has even sought to educate the US public on its policy priorities via major TikTok influencers.

But the app remains firmly in the crosshairs of federal watchdogs.

Chew indicated in his letter that TikTok remained under a review by the Committee on Foreign Investment in the United States, the government panel that assesses national security risks of foreign investment into or ownership of US entities.

Amid the sustained scrutiny, TikTok has moved all its US user data to cloud servers operated by US cloud computing company Oracle, though it continues to store backups in its own data centres in the US and Singapore. Chew said TikTok expected to eventually delete those backups as it pivoted "fully" to the Oracle platform.

The group of senators had written to Chew earlier this week seeking answers from him, following reporting by BuzzFeed that alleged frequent access by ByteDance staff to TikTok user data, including one engineer who had "access to everything".

Despite congressional testimony by a TikTok executive last year that data access was determined by a US-based security team, BuzzFeed cited numerous employees who said US staff had to turn to China-based colleagues for help in accessing US user data.