TikTok & ByteDance Biometric Data Privacy Settlement

This landmark privacy class action accused TikTok and its parent company ByteDance of systematically collecting biometric identifiers — including faceprints and voiceprints — from users' videos without disclosure or consent, in violation of Illinois' Biometric Information Privacy Act (BIPA) and multiple other state and federal privacy statutes. Plaintiffs alleged that TikTok's app also scraped device data, clipboard contents, and precise GPS location data, transmitting it to servers in China, raising significant national security and consumer privacy concerns.

The litigation consolidated dozens of individual lawsuits filed across the United States and resulted in a $92 million settlement — one of the largest privacy settlements in U.S. history at the time. Beyond monetary relief, the settlement required TikTok to cease collecting biometric data without consent and to delete improperly stored data. The case drew enormous public and Congressional attention, ultimately contributing to ongoing legislative scrutiny of TikTok's data practices and the broader debate over foreign-owned apps accessing American user data.