The guidelines prohibit sharing personal information that could lead to harms including identity theft, stalking, or fraud, and separately prohibit any attempts to hack, reverse-engineer, or compromise TikTok's platform systems.
This analysis describes what TikTok's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These provisions establish content removal authority over doxing and related privacy-harming disclosures, and create a platform-level prohibition on security research or reverse-engineering activities, the latter of which may interact with security researcher safe harbor expectations and applicable computer fraud statutes.
Interpretive note: The document does not define the threshold at which information sharing 'could lead to harm,' leaving the operational boundary between prohibited doxing and permissible discussion of public information subject to platform interpretive discretion.
The updated Community Guidelines expand what conduct TikTok prohibits regarding regulated goods. Previously, the platform prohibited 'trade, marketing, or promotion' of regulated items; the revised language now also prohibits 'providing access to' such goods. Additionally, the exception allowing sellers to market regulated items has been narrowed: only 'verified business accounts and verified TikTok Shop sellers' may now qualify, whereas previously 'registered business accounts' could also qualify. These changes mean more conduct is prohibited and fewer seller accounts meet the criteria for exceptions.
View change record →The agreement prohibits sharing personal information that could lead to identity theft, stalking, or fraud; content violating this provision is subject to removal. The prohibition on reverse-engineering or otherwise compromising TikTok's systems applies to all users regardless of purpose.
Cross-platform context
See how other platforms handle Personal Information and Privacy Prohibition and similar clauses.
Compare across platforms →"Personal Information: We don't allow sharing personal information that could lead to harm, such as identity theft, stalking, or fraud. Platform Security: We don't allow attempts to hack, reverse-engineer, or otherwise compromise TikTok's systems.Excerpt from TikTok's Community Guidelines
(1) REGULATORY LANDSCAPE: The personal information provision engages state-level data protection laws including the California Consumer Privacy Act and New York SHIELD Act, as well as GDPR in the EU/EEA context, all of which address …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
These provisions establish content removal authority over doxing and related privacy-harming disclosures, and create a platform-level prohibition on security research or reverse-engineering activities, the latter of which may interact with security researcher safe harbor expectations and applicable computer fraud statutes.
The agreement prohibits sharing personal information that could lead to identity theft, stalking, or fraud; content violating this provision is subject to removal. The prohibition on reverse-engineering or otherwise compromising TikTok's systems applies to all users regardless of purpose.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok.