Advertisers and data partners send TikTok information about your activity on other websites, apps, and in physical stores, including what you buy, and TikTok uses this to match you to your account and target you with personalized ads on and off TikTok.
This analysis describes what TikTok Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This cross-context behavioral advertising practice means your personal data is enriched by third-party sources you may not be aware of, creating a more detailed profile than what TikTok observes from your in-app behavior alone.
The updated policy states that TikTok Pte. Ltd., a Singapore-registered entity, now provides and controls the Platform, replacing the previous U.S.-based operator. The policy removes its prior explic…
Your offline and online shopping behavior, browsing on other websites, and in-store purchases may be shared with TikTok by advertisers and data partners, used to target you with ads across platforms without necessarily requiring your direct knowledge or consent at the point of data collection.
How other platforms handle this
We may link or combine information that we collect about you (such as linking your travel booking to your AAdvantage® account, or adding saved AAdvantage® account information to your booking). This may include information that we collect offline (such as in-person airport interactions), information ...
Perplexity may collect and use aggregated and de-identified data derived from Customer's and Authorized Users' use of the Service for purposes of improving, developing, and enhancing the Service and Perplexity's AI models, provided that such data does not identify Customer or any individual user.
If you access or use any of Oura's location-based services, such as by enabling GPS-based activity tracking through our Services, Oura may process the approximate or precise location of your device while the service is active. This data may be obtained via your device's service provider network ID, ...
Monitoring
TikTok Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Advertisers, publishers, and measurement and other partners share information with us about you and the actions you have taken outside of the Platform, such as your activities on other websites and apps or in stores, including the products or services you purchased, online or in person. These partners also share information with us, such as mobile identifiers for advertising, device information, hashed email addresses and phone numbers, cookie identifiers, information regarding your interaction with ads and conversion events, and inferences related to preferences and characteristics, which we use to help match you and your actions outside of the Platform with your TikTok account and to personalise the ads you see on and off the Platform.— Excerpt from TikTok Ads's TikTok Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages CCPA/CPRA definitions of 'sale' and 'sharing' of personal information for cross-context behavioral advertising, GDPR Articles 6 and 13 (lawful basis and transparency for processing data from third-party sources), and the FTC Act Section 5 (unfair or deceptive practices in data brokerage and ad targeting). The California Privacy Protection Agency (CPPA) and the FTC are the primary enforcement authorities. Under CPRA, consumers have the right to opt out of the 'sharing' of personal information for cross-context behavioral advertising, regardless of whether monetary consideration is exchanged. (2) GOVERNANCE EXPOSURE: High. The ingestion of off-platform behavioral data including in-store purchase records, hashed identifiers, and device data from advertiser partners represents a broad data enrichment practice that creates significant CCPA/CPRA exposure. The CPRA's sensitive personal information provisions and opt-out rights for sharing apply. GDPR requires that data subjects be informed about third-party data sources and that a valid legal basis exists for this processing; reliance on legitimate interests for this type of cross-context behavioral profiling has been challenged by EU supervisory authorities. (3) JURISDICTION FLAGS: California (CPRA opt-out of sharing rights, CPPA enforcement), EU/EEA (GDPR Articles 6, 13, and 14 transparency obligations for data obtained from third parties, restrictions on legitimate interests basis for profiling), UK (UK GDPR and ICO guidance on adtech). Vermont, Colorado, Connecticut, and Virginia also have consumer data privacy laws that may apply to cross-context behavioral advertising. Heightened exposure exists where the off-platform data includes sensitive categories such as health or financial information. (4) CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with advertiser partners should be reviewed to confirm they include appropriate representations about the provenance and lawful basis for the personal data they transmit to TikTok. Procurement teams should assess whether partner data includes data originally collected from EU/EEA data subjects, which would trigger GDPR requirements regardless of where TikTok processes it. The use of hashed email addresses and mobile identifiers raises re-identification risk questions that may require data protection impact assessments. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether TikTok's opt-out mechanisms for cross-context behavioral advertising meet CPRA requirements and are accessible to California residents. Privacy notices should disclose third-party data sources as required by GDPR Article 14. Data mapping should capture the inbound data flows from advertiser partners as distinct processing activities with documented legal bases. The TikTok Advertiser Tools integration (referenced in the policy) used by third-party websites should be assessed for e-privacy directive compliance in EU markets.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This cross-context behavioral advertising practice means your personal data is enriched by third-party sources you may not be aware of, creating a more detailed profile than what TikTok observes from your in-app behavior alone.
Your offline and online shopping behavior, browsing on other websites, and in-store purchases may be shared with TikTok by advertisers and data partners, used to target you with ads across platforms without necessarily requiring your direct knowledge or consent at the point of data collection.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok Ads.