Data Report Card · TikTok
TikTok Data Report Card
TikTok account
§ Enforcement action
Data
Practices
Practices
2Access2Portability1Friction2Deletion1Sells0Trains AI
=
D
§
4/12
Agent
Readiness
Readiness
2Access
2Portability
1API access
=
B
5/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 4-point deduction (severity 2) for a verified regulatory action: 8/12 on data practices − 4 = 4/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from TikTok's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve in-app export via Settings → Account → Download your data, selectable across all activity categories, no fee.
TikTok Support — Requesting your data · accessed Jun 2026 ↗2Portabilitystated
Export available as structured
TikTok data export guide · accessed Jun 2026 ↗JSON (the TXT option is far less complete); JSON contains full activity, like/comment and ad-category data.1Frictionstated
Self-serve request but delivery is asynchronous — typically a few days and TikTok's own docs allow up to 30 days.
TikTok Support — Requesting your data · accessed Jun 2026 ↗2Deletionstated
Self-serve account deletion in-app with a 30-day reactivation grace period before permanent erasure of profile, videos and data.
TikTok Support — Deactivate your account · accessed Jun 2026 ↗1Sells / sharesstated
Says it does not sell or share for cross-context ads "where restricted by applicable law" but does share with advertising/analytics partners; no GPC honoring is referenced in the US policy.
TikTok Privacy Policy (US) · accessed Jun 2026 ↗0Trains AIstated
Policy states it processes user info to "train, test, and improve" machine-learning models and algorithms with no explicit opt-out for AI/ML training.
TikTok Privacy Policy (US) · accessed Jun 2026 ↗§Enforcement action — deducts 4 points (severity 2); data practices without the penalty scored C (8/12)verified
Ireland's DPC fined TikTok €530 million in May 2025 for unlawfully sending EEA user data to China (under appeal), on top of a €345 million fine in September 2023 for default settings that made children's accounts public.
Irish Data Protection Commission · 2 May 2025 ↗1API access — feeds Agent Readiness, not the /12stated
TikTok offers a Data Portability API that, after a privacy and security review, lets approved developers use OAuth to fetch a user's posts, profile, activity and direct messages with one-time or ongoing access — but it is currently limited to users in the EEA and UK.
TikTok — Data Portability API · accessed Jun 2026 ↗TikTok offers a strong self-serve JSON export and clean 30-day deletion, but trains AI on user data with no opt-out and does not reference GPC. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
How to request your data from TikTok
- Go to https://www.tiktok.com/setting/download-your-data — TikTok's data-request entry point.
- Sign in → Download your data → select TXT or JSON → Request data.
- Expected wait: Typically 1–4 days; docs allow up to 30 days — TikTok's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact TikTok — Privacy Team: https://www.tiktok.com/legal/report/privacy.
These steps reflect TikTok's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.