TikTok states it may process sensitive personal information you choose to include in your content or submissions, such as information about your race, religion, health, sexual orientation, or immigration status, and does so under applicable state privacy law.
This analysis describes what TikTok Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause defines TikTok's operational framework for handling categories of data that state privacy laws designate as sensitive, establishing that processing occurs within the bounds of statutory permissions and user discretion over submission of such data.
Interpretive note: The policy does not specify the consent mechanism for processing sensitive personal information present in user content, as opposed to information directly submitted through a form, leaving the adequacy of consent for this category ambiguous.
The updated policy changed the controlling entity from TikTok USDS Joint Venture LLC to TikTok Pte. Ltd., a Singapore-registered company. The U.S.-specific privacy policy language was replaced with terms covering "other regions." Users previously governed under U.S. privacy protections are now subject to different jurisdictional terms.
View change record →If you post content that reveals sensitive personal information, such as your health status, sexual orientation, or immigration status, TikTok states this information is processed under applicable law, but it may also be visible to other users and the public depending on your account privacy settings.
Cross-platform context
See how other platforms handle Sensitive Personal Information Processing and similar clauses.
Compare across platforms →Monitoring
TikTok Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Information You Provide may include sensitive personal information, as defined under applicable state privacy laws. We process such information in accordance with applicable law, such as to provide the Services and other permitted purposes under state privacy laws, like the California Consumer Privacy Act ("CCPA"). You may choose whether or not you include sensitive personal information in your user content or in other information you voluntarily submit. The type of information that state privacy laws, such as the CCPA, have identified as sensitive personal information include the following: racial or ethnic origin, national origin, religious beliefs, mental or physical health diagnosis, sexual life or sexual orientation, status as transgender or nonbinary, citizenship or immigration status, or financial information.— Excerpt from TikTok Ads's TikTok Privacy Policy
1. REGULATORY LANDSCAPE: CCPA/CPRA designates racial or ethnic origin, religious beliefs, health diagnosis, sexual orientation, transgender or nonbinary status, citizenship or immigration status, and financial information as sensitive personal information, requiring heightened protections including opt-in consent for certain processing activities. The policy states processing is conducted in accordance with applicable law and for permitted purposes, but does not specify the consent mechanism for sensitive personal information derived from user content rather than directly provided through a form. 2. GOVERNANCE EXPOSURE: Medium. Sensitive personal information inferred or collected from user content presents disclosure and consent challenges distinct from information directly submitted by users. The policy notes that sensitive personal information may be visible to others depending on privacy settings, which raises questions about downstream access and processing by third parties who view or interact with the content. 3. JURISDICTION FLAGS: California's CPRA provides the most detailed framework for sensitive personal information, including the right to limit use and disclosure. Washington's My Health My Data Act applies specifically to consumer health data and may apply to mental or physical health information present in user content. Illinois BIPA and other state statutes may apply to biometric-adjacent sensitive data. 4. CONTRACT AND VENDOR IMPLICATIONS: Service providers who receive or process user content containing sensitive personal information should be bound by appropriate data processing agreements that address CPRA's heightened requirements for sensitive personal information handling. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether processing of sensitive personal information present in user content requires separate consent or opt-in mechanisms beyond what is provided in the general privacy policy. The Right to Limit Use of Sensitive Personal Information under CPRA should be evaluated for implementation. Data maps should identify processing points where sensitive personal information from user content is analyzed, shared, or used for secondary purposes such as advertising or content moderation.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause defines TikTok's operational framework for handling categories of data that state privacy laws designate as sensitive, establishing that processing occurs within the bounds of statutory permissions and user discretion over submission of such data.
If you post content that reveals sensitive personal information, such as your health status, sexual orientation, or immigration status, TikTok states this information is processed under applicable law, but it may also be visible to other users and the public depending on your account privacy settings.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok Ads.