Since its launch in 2017, TikTok has become an enormously popular app in Canada — and the source of many privacy and security concerns. Recently, the Canadian federal government restricted the operation of TikTok Technology Canada Inc., based on the findings of an undisclosed national security review taken under the auspices of the Investment Canada Act, while still permitting the app run by TikTok Pte. Ltd. to collect, use and analyze Canadians’ data. This dual approach overlooks key opportunities for Canada to strengthen its digital sovereignty with respect to the identified concerns. There are four forms of more effective regulation, including: text and data mining exceptions; mandatory access to TikTok application programming interfaces; required disclosure of TikTok source code to the government; and stricter data localization requirements of data collected by the app.
