Data Report Card · TikTok
TikTok Data Report Card
D
4/12 Policy grade · TikTok account
§ Enforcement action
§ This grade reflects a 4-point deduction (severity 2) for a verified regulatory action: 8/12 before the deduction − 4 = 4/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from TikTok's published policy; none has been tested (run by us) yet.
2Accessstated
Self-serve in-app export via Settings → Account → Download your data, selectable across all activity categories, no fee.
TikTok Support — Requesting your data · accessed Jun 2026 ↗2Portabilitystated
Export available as structured
TikTok data export guide · accessed Jun 2026 ↗JSON (the TXT option is far less complete); JSON contains full activity, like/comment and ad-category data.Connects to apps: Partly. TikTok offers a Data Portability API that, after a privacy and security review, lets approved developers use OAuth to fetch a user's posts, profile, activity and direct messages with one-time or ongoing access — but it is currently limited to users in the EEA and UK. TikTok — Data Portability API · accessed Jun 2026 ↗
1Frictionstated
Self-serve request but delivery is asynchronous — typically a few days and TikTok's own docs allow up to 30 days.
TikTok Support — Requesting your data · accessed Jun 2026 ↗2Deletionstated
Self-serve account deletion in-app with a 30-day reactivation grace period before permanent erasure of profile, videos and data.
TikTok Support — Deactivate your account · accessed Jun 2026 ↗1Sells / sharesstated
Says it does not sell or share for cross-context ads "where restricted by applicable law" but does share with advertising/analytics partners; no GPC honoring is referenced in the US policy.
TikTok Privacy Policy (US) · accessed Jun 2026 ↗0Trains AIstated
Policy states it processes user info to "train, test, and improve" machine-learning models and algorithms with no explicit opt-out for AI/ML training.
TikTok Privacy Policy (US) · accessed Jun 2026 ↗§Enforcement action — deducts 4 points (severity 2); Policy grade without the penalty: C (8/12)verified
Ireland's DPC fined TikTok €530 million in May 2025 for unlawfully sending EEA user data to China (under appeal), on top of a €345 million fine in September 2023 for default settings that made children's accounts public.
Irish Data Protection Commission · 2 May 2025 ↗TikTok offers a strong self-serve JSON export and clean 30-day deletion, but trains AI on user data with no opt-out and does not reference GPC. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
Events
Breaches, policy changes, and export-format changes we’ve recorded at TikTok — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →
No events on record for TikTok.
Grade history
Every change to this company’s grade since it was first published, and why. All grade changes →
No changes since this grade was first published in Jun 2026.
How to request your data from TikTok
- Go to https://www.tiktok.com/setting/download-your-data — TikTok's data-request entry point.
- Sign in → Download your data → select TXT or JSON → Request data.
- Expected wait: Typically 1–4 days; docs allow up to 30 days — TikTok's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact TikTok — Privacy Team: https://www.tiktok.com/legal/report/privacy.
These steps reflect TikTok's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.