What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://www.tiktok.com/legal/privacy-policy-us', 'difficulty': 'MODERATE', 'action_type': 'DELETE_DATA', 'instructions': "Submit a data deletion request via TikTok's privacy policy page or in-app at Settings & Privacy > Privacy > Personalisation and data > Delete your account and data.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': "Cross-border data transfers to ByteDance infrastructure may implicate FTC Act Section 5 if TikTok's disclosures about data transfer destinations are misleading or inadequate.", 'complaint_url': 'https://reportfraud.ftc.gov/'}, {'agency': 'State_AG', 'reason': "State AGs in California and other states have active investigations into TikTok's data transfer practices, particularly involving minor users' data.", 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this Cross-Border Data Transfer via Multiple MCS Endpoints clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Cross-Border Data Transfer via Multiple MCS Endpoints — TikTok

What it is

endpoint: https://maliva-mcs.byteoversea.com/list ... https://mcs-i18n.tiktok.com/v1/list ... https://mcs-ie.tiktokw.eu/list ... https://mcs-sg.tiktok.com/list ... https://mcs-va.tiktok.com/list ... https://mcs-us.tiktok.com/list ... https://mcs.tiktokv.us/v1/list

Why it matters

Your personal data is being transmitted to servers in multiple countries — including ByteDance infrastructure — which raises questions about whether adequate data transfer safeguards (like GDPR Standard Contractual Clauses) are in place, particularly given concerns about Chinese government data access laws.

Consumer impact

TikTok's platform policy pages embed JavaScript instrumentation that actively monitors device sensors including clipboard content, geolocation, accelerometer, gyroscope, and battery status, meaning data collection occurs even when users are simply reading policy documents. This broad sensor monitoring, combined with TikTok's known data-sharing practices and ByteDance's ownership structure, creates meaningful privacy risk for all users including those in jurisdictions with strong data protection laws. You can limit TikTok's data access by revoking clipboard, location, and microphone permissions for the TikTok app in your device's settings.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

Submit a data deletion request via TikTok's privacy policy page or in-app at Settings & Privacy > Privacy > Personalisation and data > Delete your account and data.

Applicable agencies

FTC

Cross-border data transfers to ByteDance infrastructure may implicate FTC Act Section 5 if TikTok's disclosures about data transfer destinations are misleading or inadequate.
File a complaint →
State AG

State AGs in California and other states have active investigations into TikTok's data transfer practices, particularly involving minor users' data.
File a complaint →

Provision details

Document information

Document

TikTok Community Guidelines

Entity

TikTok

Document last updated

March 24, 2026

Tracking information

First tracked

April 3, 2026

Last verified

April 9, 2026

Record ID

CA-P-002463

Document ID

CA-D-00034

Evidence Provenance

Source URL

https://www.tiktok.com/community-guidelines/en/

Wayback Machine

View archived versions →

SHA-256

b284b4e910ea0436fae2982f81c60e65a11a5de7c9ed3db97b9131d136636bfb

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: TikTok | Document: TikTok Community Guidelines | Record: CA-P-002463
Captured: 2026-04-03 08:45:47 UTC | SHA-256: b284b4e910ea0436…
URL: https://conductatlas.com/platform/tiktok/tiktok-community-guidelines/cross-border-data-transfer-via-multiple-mcs-endpoints/
Accessed: April 21, 2026

Classification

Severity

High

Cross-Border Data Transfer via Multiple MCS Endpoints