NCC Hired to Conduct Independent Audit of TikTok’s Data Flows Amid Chinese Influence Concerns

Facebook’s efforts to address concerns about data flow to China

Facebook, one of the largest social media platforms, is assuring regulators and governments that the data of its European users does not end up in China. Currently, Facebook is working on “Project Clover,” a plan that involves the development of a second data center in Ireland to manage its data regions effectively.

To strengthen its data security measures, Facebook has engaged NCC Group, a UK-based cyber security and information assurance firm. According to Elaine Fox, head of privacy for TikTok in Europe, the security gateways implemented by NCC Group will limit access to protected data by China-based employees. This protected data includes personal information of EU and UK users, such as their real names, email addresses, phone numbers, IP addresses, and any shared financial information, as well as user-generated content shared with the audience of “only me.”

Exceptions to this protected data include shared “public” data, “aggregated” data for statistical purposes, and “interoperable” data necessary for system functionality. The co-management of this process will be carried out by NCC Group and TikTok.

Facebook is taking further measures to ensure data protection by involving a third-party European security company to independently audit its data controls and protections. This company will monitor data flows, provide verification, and report any incidents. According to Theo Bertram, TikTok’s vice president for public policy in Europe, NCC Group will perform ongoing security assessments of the new security gateways implemented by Facebook.

TikTok, owned by Chinese parent company Bytedance, has faced controversy regarding potential access to its data systems by Chinese authorities. TikTok has consistently denied these allegations and has invested over €1bn to establish separate data flows in the US and Europe. “Project Clover” aims to create a secure enclave specifically for European TikTok user data, addressing concerns and providing reassurance to European policymakers. However, in April, the Irish Government decided to restrict the use of TikTok on public sector devices, following advice from the National Cyber Security Centre.

Despite this setback, TikTok remains hopeful that its enhanced data controls and operations will convince policymakers of its commitment to safety. Mr. Bertram emphasizes that all these measures are designed to safeguard the data of European users, allowing access only to approved employees under strict oversight and verification. In the coming months, TikTok and NCC Group plan to engage with policymakers across Europe to provide an in-depth explanation of their comprehensive system’s functionality.

Reference

Denial of responsibility! VigourTimes is an automatic aggregator of Global media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, and all materials to their authors. For any complaint, please reach us at – [email protected]. We will take necessary action within 24 hours.
Denial of responsibility! Vigour Times is an automatic aggregator of Global media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, and all materials to their authors. For any complaint, please reach us at – [email protected]. We will take necessary action within 24 hours.
DMCA compliant image

Leave a Comment