July 16, 2020 – Biometric Privacy Lawsuit Alleges TikTok “Commercializes and Profits From” Exploitation of Illinois Minors
A proposed class action alleges short-form video app TikTok “knowingly entices” Illinois minors into providing images, videos, biometric data and other confidential and private information without first obtaining written consent from a parent or legal guardian.
More broadly, the 21-page case, filed July 15, claims TikTok and ByteDance commercialize and profit from their “brazen exploitation” of Illinois minors in violation of the state’s Biometric Information Privacy Act (BIPA). The TikTok app’s proprietary facial recognition technology scans every face that appears in every uploaded video, extracting geometric data on unique points and contours, and then creates and stores a template of each face without informing users of this practice, the complaint says.
According to the suit, TikTok has captured, obtained, stored, and/or used Illinois minors’ facial scans without providing proper notice, informing subjects that their biometric information was being collected and disclosed, or seeking and obtaining written releases allowing for the collection, storage and disclosure of the data. Further, TikTok has failed to make a data use and retention policy, as well as guidelines outlining the permanent destruction of users’ information, available to the public, the complaint claims.
The lawsuit, foundhere, says TikTok, a platform full of 15-second videos of dancing, lip-syncing and more, currently sits among the top five most downloaded free iPhone/Android apps and boasts roughly 800 million active users, 40 percent of whom the case says are under 18 years old.
June 9, 2020 – TikTok, ByteDance Facing More Biometric Privacy Litigation
TikTok collects, stores and uses without consent the biometric information of those whose faces appear in videos posted to the social media app, a proposed class action claims.
The latest in a wave of lawsuits against TikTok and ByteDance over alleged violations of the Illinois Biometric Information Privacy Act (BIPA), the case claims the companies have failed to obtain informed consent before collecting scans of the facial geometries of those who appear in content posted to the short-form video app. At no point do the defendants inform users that TikTok collects, captures, receives, obtains, stores or otherwise uses their unique, unchangeable biometric information, the complaint, filed by a parent on behalf of their minor child, claims.
Further, the suit says TikTok and ByteDance do not disclose what they do with users’ biometric data once it’s captured, nor share any guidelines for how long the data is kept or when it will be permanently destroyed. The complaint can be foundhere.
May 20, 2020 – California Class Action Claims TikTok Failed to Obtain Consent Before Collecting User Facial Geometries
A proposed class action filed in California federal court is the latest to allege TikTok and ByteDance have run afoul of Illinois privacy law by collecting app users’ facial geometries without consent.
According to the suit, the teen-centric short-form video app collects a scan of a user’s face each time he or she accesses TikTok’s facial filters, stickers or face-tracker lens. The lawsuit, filed on behalf of a minor TikTok user residing near Chicago, claims the companies have violated the Illinois Biometric Information Privacy Act in that they failed to obtain informed, written consent from users before collecting, storing or using their biometric information, and failed to implement and maintain a publicly available retention schedule with regard to the data.
May 11, 2020 – TikTok Hit with Another Biometric Data Privacy Suit in Illinois
TikTok and ByteDance are the defendants in another proposed class action alleging the companies’ collection, storage and disclosure of app users’ facial geometries without consent violates the Illinois Biometric Information Privacy Act (BIPA).
Filed on behalf of two minor TikTok users, the lawsuit alleges TikTok and ByteDance’s actions have robbed the plaintiffs and other users of the power to make decisions about the fate of their unique biometric information. This is particularly troublesome when it comes to TikTok given the short-form video app’s connection to the Chinese government, a concern that’s led some U.S. military branches to ban the use of TikTok on government-issued phones, the complaint says.
“In direct violation of the BIPA, the TikTok app’s proprietary facial recognition technologyscans every video uploaded to the app for faces, extracts geometric data relating to the unique points and contours (i.e., biometric identifiers) of each face, and then uses that data to create and store a template of each face –all without ever informing anyone of this practice,” the case claims.
A proposed class action lawsuit alleges TikTok, Inc. has violated Illinois biometric privacy law by scanning app users’ faces and storing their facial geometries without consent to do so.
Filed by two Illinois guardians on behalf of minor children, the case further alleges defendants TikTok, Inc. and ByteDance, Inc. do not disclose to those who use the ultra-popular 15-second-video app what the companies do with their data, nor who has access to such and whether, where and for how long facial scans are stored.
According to the lawsuit, TikTok, whose user base consists predominantly of young people ages 16 to 24, scans the facial geometry of each user before running an algorithm to determine the individual’s age. Facial scans also allow users to superimpose animated filters onto the faces of video subjects, the case says. Per the lawsuit, TikTok has been downloaded upward of a billion times worldwide and more than 120 million times in the U.S., making the app the most-downloaded non-game app in the world.
Companies that collect biometric identifiers such as facial scans and fingerprints in Illinois, however, are subject to the state’s Biometric Information Privacy Act, which lays out stringent guidelines for the collection, storage, purchase and disclosure of citizens’ unchangeable biometric data. Enacted in 2008, the Illinois BIPA stipulates that a company cannot “collect, capture, purchase, receive through trade, or otherwise obtain” an individual’s biometric information unless it first:
Informs the individual or their legally authorized representative in writing that a biometric identifier or biometric information is being collected or stored;
Informs the subject or their authorized representative in writing of the specific purpose and length of term for which a biometric identifier is being collected, stored and used; and
Receives a written release from the subject allowing for the collection of their biometric data.
Further, the Illinois BIPA requires a company dealing in biometric information to publish a written, publicly available retention schedule and guidelines for the permanent destruction of citizens’ biometric identifiers “when the initial purpose for collecting or obtaining such” has been satisfied or within three years of an individual’s last interaction with the entity, the suit says.
Notwithstanding TikTok’s reliance on facial scanning for age verification and in-app filters, the company does not obtain consent from users before collecting, storing or disclosing their sensitive biometric information, the lawsuit alleges. The suit further alleges TikTok shares users’ biometric information with “other members of its corporate family,” including ByteDance and affiliates in China.
Early this year, TikTok quickly settled a proposed class action that alleged the company collected data from children under 13 years old without parental consent. Within a week of that case’s filing, TikTok was hit with an additional lawsuit over claims that the company surreptitiously vacuumed up and transferred user data to servers in China to “identify, profile and track the location and activities” of U.S. residents.
In February 2020, the Federal Trade Commission announced those who operate TikTok would pay a $5.7 million civil penalty for violations of the Children’s Online Privacy Protection Act (COPPA).
Though the suit was filed in California, the case looks to cover a class of Illinois residents who used the musical.ly or TikTok app and utilized face filters, face stickers or the app’s face tracker lens on an image or video of their own face or on their face in another individual’s video or image.
Get class action news sent to your inbox - sign up for ClassAction.org's newsletter here.