TikTok states it may collect faceprints and voiceprints from videos and audio you upload or create on the platform, and will ask for your permission where a specific law requires it.
This analysis describes what TikTok's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive categories of personal information under US law because it cannot be changed if compromised; the policy's qualifier 'where required by law' means consent may not be sought in all jurisdictions.
Interpretive note: The scope of consent obligations depends on which states' biometric laws apply to a given user; the policy's conditional framing does not specify the mechanism for determining applicable law.
The policy states TikTok may extract faceprints and voiceprints from user-generated content; users in Illinois, Washington, and Texas have specific statutory rights regarding biometric data collection and consent, while users in other states may have fewer protections depending on applicable law.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your user content. Where required by law, we will seek any required permissions from you prior to any such collection.Excerpt from TikTok's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly engages Illinois BIPA, which requires informed written consent before collecting biometric identifiers and imposes a private right of action with statutory damages.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Biometric data is among the most sensitive categories of personal information under US law because it cannot be changed if compromised; the policy's qualifier 'where required by law' means consent may not be sought in all jurisdictions.
The policy states TikTok may extract faceprints and voiceprints from user-generated content; users in Illinois, Washington, and Texas have specific statutory rights regarding biometric data collection and consent, while users in other states may have fewer protections depending on applicable law.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TikTok.