TikTok states it does not sell your personal information and does not share it for cross-context behavioral advertising where the law restricts this, but the restriction is conditional on applicable law rather than a blanket policy.
This analysis describes what TikTok Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy's qualified framing of the no-sale and no-cross-context-behavioral-advertising commitment, conditioned on 'where restricted by applicable law,' means these protections apply in full only in jurisdictions with relevant statutes, such as California under CCPA/CPRA, rather than universally.
Interpretive note: The conditional framing ('where restricted by applicable law') means the scope of these protections depends on the user's state of residence and the applicable statute, which varies significantly across jurisdictions.
The updated policy states that TikTok Pte. Ltd., a Singapore-registered entity, now provides and controls the Platform, replacing the previous U.S.-based operator. The policy removes its prior explic…
TikTok's commitment not to sell your personal information or share it for cross-context behavioral advertising applies where applicable law restricts such practices; users in states without comprehensive privacy statutes may not have the same protections as California residents under CCPA/CPRA.
How other platforms handle this
Depending on where you live, you may have the right to access the personal data we hold about you, to request its correction or deletion, to receive a copy of your data in a portable format, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise yo...
Depending on your location, you may have the following rights with respect to your personal data: the right to access your personal data; the right to correct inaccurate personal data; the right to request deletion of your personal data; the right to data portability; the right to restrict or object...
Depending on where you live, you may have certain rights regarding your personal information, such as the right to access, correct, delete, or transfer your personal information, to object to or restrict certain processing of your data, or to withdraw consent for processing where you've previously p...
Monitoring
TikTok Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We are committed to maintaining your trust, and while we do not sell your personal information or share your personal information with third parties for purposes of cross-context behavioral advertising where restricted by applicable law, we want you to understand when and with whom we may share the Information We Collect for the purposes described below.— Excerpt from TikTok Ads's TikTok Privacy Policy
1. REGULATORY LANDSCAPE: This provision directly engages CCPA/CPRA, which defines 'sale' and 'sharing' of personal information and provides California residents with opt-out rights. The conditional framing ('where restricted by applicable law') means the no-sharing commitment is law-dependent rather than universal. Virginia, Colorado, Connecticut, Texas, and Oregon comprehensive privacy statutes also include targeted advertising opt-out rights, but their scope and definitions of 'sale' and 'sharing' vary from CCPA/CPRA. 2. GOVERNANCE EXPOSURE: Medium. The conditional framing is legally precise but creates a tiered protection landscape that may not be fully transparent to users in states without comprehensive privacy laws. Compliance teams should map which specific data flows constitute 'sharing' under CPRA versus 'sale' under other statutes to ensure opt-out mechanisms are correctly scoped. 3. JURISDICTION FLAGS: California creates the highest compliance exposure given CPRA's detailed opt-out requirements and the California Privacy Protection Agency's enforcement authority. Texas, Virginia, Colorado, and Connecticut provide varying degrees of opt-out rights. Users in states without comprehensive privacy laws receive the most limited protections under this provision. 4. CONTRACT AND VENDOR IMPLICATIONS: The no-sale commitment does not preclude data sharing with advertising, analytics, and measurement partners, which may constitute 'sharing' under CPRA. Contracts with advertising technology vendors should specify whether their data receipt constitutes sharing for cross-context behavioral advertising and whether opt-out signals are honored. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that opt-out mechanisms for cross-context behavioral advertising are accessible to users in all applicable states, not only California. The California Privacy Protection Agency may scrutinize the conditional framing of this commitment. Data processing agreements with advertising partners should address CPRA sharing restrictions and the handling of opt-out signals from users.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy's qualified framing of the no-sale and no-cross-context-behavioral-advertising commitment, conditioned on 'where restricted by applicable law,' means these protections apply in full only in jurisdictions with relevant statutes, such as California under CCPA/CPRA, rather than universally.
TikTok's commitment not to sell your personal information or share it for cross-context behavioral advertising applies where applicable law restricts such practices; users in states without comprehensive privacy statutes may not have the same protections as California residents under CCPA/CPRA.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok Ads.