Get the weekly digest
Every policy change across 844 tracked documents, once a week. No account needed.
TikTok Ads substantially restructured its privacy policy in an update detected on July 16, 2026, expanding disclosure of data collection practices and reorganizing how it describes information handling. The revised policy now explicitly covers TikTok's Ad Network, specifies operation by TikTok USDS Joint Venture LLC rather than the Singapore-registered entity, adds detailed descriptions of AI interactions and clipboard content collection, includes explicit references to state health privacy laws and the CCPA, and reorganizes data categories from a two-part framework (Automatically Collected Information / Inferred Information) into a three-part structure (You Provide, Automatically Collected, From Other Sources). The policy removed approximately 167 sentences describing prior practices and modified 149 sentences, resulting in a net document of 157 sentences.
The updated privacy policy expands disclosure of data collection practices affecting all users. The revised terms now explicitly describe collection of AI interactions (prompts, questions, and responses), clipboard content when accessing certain functions, pre-upload collection of user content for recommendations, and messaging through shopping features. The policy now explicitly addresses state-specific health privacy laws and CCPA-defined sensitive personal information, including racial or ethnic origin, health diagnoses, sexual orientation, and immigration status. The policy establishes that TikTok does not require provision of sensitive information but notes that published user content on these topics may be visible depending on privacy settings. You can adjust your settings to control which data types are collected and manage your contact sync preferences.
The revised privacy policy expands disclosure of data collection practices, particularly AI interactions and clipboard content, and explicitly addresses state-level health privacy frameworks. For users, this means clearer disclosure of what data is collected when using AI features and sharing content. For organizations integrating TikTok into their vendor or partner ecosystem, the entity change to TikTok USDS Joint Venture LLC and expanded regulatory references may require verification of existing data processing agreements and privacy certifications.
→ Review your privacy settings to understand which data types TikTok collects and manage contact sync permissions.
→ If you use AI-powered features on TikTok, review the updated disclosure explaining that prompts and responses are collected.
→ If you are a minor, refer to the Teen Privacy Summary included in the updated policy.
→ Users will remain subject to clipboard content collection when initiating information sharing or paste functions, as described in the updated policy.
→ AI interactions including prompts and responses will continue to be collected and processed as disclosed in the revised terms.
→ Health-related user content published on the platform may be visible to other users depending on privacy settings, as stated in the policy.
ConductAtlas has recorded 2 material changes to this document over 71 days of monitoring (since May 2026).
Policy now states TikTok USDS Joint Venture LLC operates the Services, replacing prior Singapore-registered TikTok Pte. Ltd., affecting legal standing and regulatory jurisdiction.
Policy now explicitly discloses collection of prompts, questions, files, and responses from AI-powered interfaces.
Policy now references Washington My Health My Data Act and CCPA-defined sensitive personal information, with expanded disclosure of health data handling.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
TikTok must now disclose that it collects what users type into AI tools on its platform and the responses those tools generate.
TikTok must now explicitly disclose that it accesses clipboard content when users initiate certain sharing or pasting actions.
TikTok Ads has substantially restructured its privacy policy to reorganize data collection disclosures and expand coverage of state privacy frameworks, particularly Washington's My Health My Data Act and the CCPA. The change shifts from describing automated inference and technical data collection in separate sections to a consolidated three-part collection framework. The policy now explicitly discloses AI interaction collection and clipboard content access, which previously were less prominent. The revision also relocates governance to TikTok USDS Joint Venture LLC, a newly named entity distinct from the prior Singapore-registered TikTok Pte. Ltd. Organizations that reference TikTok's data handling in vendor assessments, privacy notices, or data processing agreements should review the restructured disclosures to ensure their own documentation remains accurate. No new enforcement regime is evident, but the expanded state law references may create documentation obligations under CCPA and emerging state health privacy statutes.
Full compliance analysis
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
Analyst $49/moConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003752.
TikTok Ads replaced its U.S.-specific privacy policy with language covering "other regions." The controlling entity shifted from TikTok USDS Joint …
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and lia…
Get alerted when this policy changes again — including what changed and why it matters.