The app has also drawn attention in the federal policy space. On Dec. 29, President Joe Biden approved a spending package which included a provision that bars federal employees from using TikTok on government-issued devices. The ban was added to the omnibus spending bill after Rep. Nancy Pelosi, D-Calif., came out in favor of it.
On Dec. 13, a group of federal lawmakers led by Sen. Marco Rubio, R-Fla., introduced a different proposal titled the “ANTI-SOCIAL CCP Act” to ban the app generally in the United States.
Kurt Opsahl, deputy executive director and general counsel of the Electronic Frontier Foundation, said that states are within their rights to ban technology on their own devices. A wider ban, however, would stifle freedom of speech and censor political activism, he said.
“TikTok’s security, privacy and its relationship with the Chinese government is indeed concerning, but a total ban is not the answer,” Opsahl wrote in an email to Government Technology. “A total ban is not narrowly tailored to the least restrictive means to address the security and privacy concerns, and instead lays a censorial blow against the speech of millions of ordinary Americans.”
Some political leaders, such as Texas Gov. Greg Abbot, have pointed to China’s National Intelligence Law to justify the bans. The law, passed in 2017, requires Chinese companies to cooperate with intelligence investigations.
A spokesperson of TikTok said in a phone interview that the company “categorically denies” sharing U.S. user data with the Chinese government or Chinese Communist Party, adding that the accusations of cyber risks from governors in recent weeks are “unfounded and politically charged.”
TikTok officials have released statements outlining their data practices, including creating a U.S. Data Security division and routing all U.S. traffic through U.S.-based servers using Oracle Cloud Infrastructure. As of July, TikTok still uses data centers in Virginia and Singapore to store user data as a backup, though it expects to delete those backups in a full transition to U.S. cloud services.
“We’re disappointed that so many states are jumping on the bandwagon to enact policies based on unfounded, politically charged falsehoods about TikTok,” said the spokesperson. “It is unfortunate that the many state agencies, offices, and universities on TikTok in those states will no longer be able to use it to build communities and connect with constituents.”
There was an early partisan divide among states, with all actions against TikTok being taken by Republican governors and elected officials, but in recent days Democrats have joined in banning TikTok on state devices. Thus far, at least five Democratic governors have joined in banning TikTok and other foreign-owned apps.
Several states and elected officials still maintain official pages on the app, including governors such as California’s Gavin Newsom and Colorado’s Jared Polis, both Democrats. It is also a popular platform for state universities in several states. The University of Utah, for example, still maintains a verified page on the platform as of Dec. 14. The University of Illinois also maintains an official page, though it’s unverified.
Here is a summary of each state that has taken action against TikTok. This list will be updated as the situation evolves.
Arizona
Arizona Gov. Katie Hobbs issued an executive order on April 4 that banned TikTok on all state-owned devices and state-leased information technology. The state gave agencies 30 days to remove the social media application from their devices or apply for exemptions.
The executive order specified that the Arizona Department of Administration and the Arizona Department of Homeland Security would work together to develop a plan prohibiting access to TikTok within 180 days. The ban also applies to any guests accessing state work networks.
The order also called for an annual report identifying other applications that pose potential cybersecurity threats.
Prior to the governor’s executive order, Arizona Attorney General Kris Mayes announced that the platform would be banned on office-owned devices due to potential security risks.
Nevada
In March, Nevada implemented a statewide inaugural “blacklist” prohibiting certain applications, hardware or software that could pose a significant security risk to the state’s infrastructure and data. The websites and applications on the blacklist are prohibited on state-owned devices, networks and platforms.
The list includes TikTok, as well as several other China-owned applications. Nevada has a policy where agencies can apply for exemptions to continue using the app.
Michigan
In March, Michigan quietly banned TikTok from state-owned devices. MLive reported that the move was made without a public announcement.
The rule went into effect March 1. Previously, employees had been able to access the social media app on state devices but had to bypass a security warning that discouraged its use.
According to acting Chief Security Officer Jayson Cavendish, TikTok is now blocked on browsers.
Meanwhile, Michigan Gov. Gretchen Whitmer continues to operate a TikTok account with more than 200,000 followers. According to state officials, the governor’s account has received an exemption to the rule and is accessed on a secure device that has never been connected to any of the state’s networks.
Vermont
Vermont has joined other states in banning TikTok on state devices, coming through a memorandum from state CIO Shawn Nailor sent on Feb. 16. The memo also bars state agencies from using apps or products from Kaspersky, ByteDance and Tencent Holdings. It further bars equipment purchases from several Chinese companies, including Huawei Technologies Company, ZTE Corporation, Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company and Dahua Technology Company.
“The federal cybersecurity and intelligence communities have documented evidence of the concerns regarding these products or telecommunications equipment and have used several mechanisms,” wrote Nailor in the memo.
Delaware
Delaware CIO Jason Clarke informed state agencies on Jan. 23 that TikTok is no longer permitted on state-owned devices or the network. Enforcement of the ban began in February.
The policy was created due to concerns that the application may harvest data including passwords, location and other sensitive information like emails and text messages. An agency newsletter also raised concerns of the Chinese government obtaining confidential, private or other data from Delaware agencies or employees.
Maine
In January, Maine Information Technology notified state workers that the state was banning TikTok from devices connected to the government network.
The move prohibited the use of the app on state phones and other devices. The state’s IT department informed employees the decision was due to concerns that the app could pose a serious threat to the its network infrastructure. The directive required the application be removed from devices by Feb. 1.
North Carolina
North Carolina Gov. Roy Cooper signed an executive order banning TikTok and WeChat on state devices on Jan. 12. The order bans the two apps, both operated by Chinese corporations, from being installed on any state-owned device, but does allow for limited exceptions. The policy will be administered by the Department of Information Technology.
“TikTok and WeChat's software and data collection policies combined with Chinese national security law create a significant risk that the Chinese government will obtain information collected by ByteDance and Tencent or enable malicious activity that threatens North Carolina's cybersecurity,” Cooper wrote in the order.
Wisconsin
Wisconsin Gov. Tony Evers signed an executive order banning TikTok and several other technologies from state devices on Jan. 12. The order directs the Division of Enterprise Technology to remove certain apps from state devices as well as ensure that agencies implement network-based restrictions on these apps.
Apps and companies impacted by this order include TikTok, Huawei Technologies, ZTE Corp, Hytera Communications, Hangzhou Hikvision Digital Technology, Tencent Holdings (which owns Tencent QQ, QQ Wallet and We Chat), Alibaba (which owns Alipay) and Kaspersky Lab (a Russian cybersecurity company).
“I trust the professionals who work in this field, and it was important for me to consult with and get advice from experts in law enforcement, cybersecurity and counterintelligence, including the information technology experts working within (the Division of Enterprise Technology), to make the best decision to protect state technologies, and ultimately, the people of Wisconsin,” Evers said in a press release.
Mississippi
Gov. Tate Reeves directed all Mississippi state agencies to ban TikTok from state-issued government devices and the state’s network on Jan. 11. State employees were given one month to remove, delete or uninstall TikTok and other software applications developed by ByteDance Ltd.
“It’s no secret that the Chinese Communist Party is actively trying to steal U.S. intellectual property and Americans’ personal information. It’s a major threat to our national security and critical infrastructure, costs the U.S. economy hundreds of billions annually, and jeopardizes American jobs,” Reeves said.
The directive instructed employees not to download or use the specified applications on state-issued cell phones, laptops or other wireless communication equipment except for law enforcement or public safety purposes. Reeves also instructed the Mississippi Department of Information Technology Services to block access to TikTok from the state network.
Alaska
Alaska Gov. Mike Dunleavy, in a memorandum to executive staff and leadership, announced a ban of TikTok on state devices and state networks. The ban affects only TikTok and not any other Chinese apps.
“Simply put, TikTok poses a clear risk to any network or user it touches,” Dunleavy wrote. “National security experts continue to highlight TikTok as a national security concern, including the possibility that the Chinese government may use TikTok to control data collection, influence TikTok’s recommendation algorithm and compromise personal devices.”
Kentucky
Kentucky Gov. Andy Beshear’s personnel department in early January updated the state’s employee handbook to bar state employees from utilizing any state IT resources to use TikTok.
The handbook, like many states’ memoranda and executive orders, provides an exception allowing state employees to use the app for “a law enforcement purpose.”
New Jersey
New Jersey Gov. Phil Murphy joined the growing list of governors announcing action against TikTok on Jan. 9. Murphy issued a cybersecurity directive through the state’s Office of Homeland Security and Preparedness in collaboration with several other IT and management offices. The directive includes removing TikTok and several other apps from state-owned devices as well as implementing network-based restrictions on access to these apps.
The list of software vendors and products that are now banned in New Jersey includes: Huawei Technologies, Zhejiang Dahua Technology, Hangzhou Hikvision Digital Technology, Tencent Holdings (which owns WeChat, QQ and QQ Wallet), Alibaba (which owns Alipay and Alibaba.com), Hytera, ZTE Corporation, ByteDance (which owns TikTok) and Kaspersky (which is headquartered in Russia).
“Bolstering cybersecurity is critical to protecting the overall safety and welfare of our state,” said Murphy in a Jan. 9 press release. “The proactive and preventative measures that we are implementing today will ensure the confidentiality, integrity and safety of information assets managed by New Jersey state government. This decisive action will ensure the cybersecurity of the state is unified against actors who may seek to divide us.”
Though most actions against TikTok have thus far been taken by Republican governors or their appointees, Murphy is a Democrat.
Ohio
Ohio Gov. Mike DeWine signed an executive order on Jan. 8 barring all state agencies from downloading or accessing websites for any “social media application, channel and platform that is owned by an entity based in China.”
“Social media applications and platforms operating in China engage in surreptitious data privacy and cybersecurity practices to include collecting personal information, behavioral use data, biometric data, and other data contained on the devices of its users,” reads the executive order.
Though the text of the order bans all platforms based in China, it does offer a list of examples, which include: TikTok, Tencent Holdings’ technology, Weibo, Xiaohongshu (Little Red Book), Zhihu, Meituan, Toutiao, Alipay, Xiami Music, Tiantian Music, DingTalk/Ding Ding, Douban, Renren, Youku Tudou and Zhihu.
Pennsylvania
Pennsylvania State Treasurer Stacy Garrity, a Republican, announced on Dec. 22, 2022, that TikTok would be banned on all state-owned devices in Treasury as well as a ban on Treasury networks.
“TikTok presents a clear danger due to its collection of personal data and its close connection to the communist Chinese government,” said Garrity in a press release. “Banning TikTok from Treasury devices and systems is an important step in our never-ending work to ensure the safety of Pennsylvanians’ hard-earned tax dollars and other important, sensitive information entrusted to Treasury.”
Pennsylvania Gov. Tom Wolf, a Democrat, has not announced any similar ban statewide.
Kansas
Kansas Gov. Laura Kelly, a Democrat, signed an executive order on Dec. 30 banning TikTok on all state-owned devices. The decision bars employees under the governor’s jurisdiction from using TikTok on state-owned devices and indicates that the governor’s office will institute a network ban of TikTok as well. Active accounts associated with state agencies will also be deleted.
Like some other states, the executive order provides for exceptions for law enforcement that must be approved by the state’s information security office.
Louisiana
Several state agency heads in Louisiana have banned TikTok or sent updated guidance on the app in recent weeks, including the secretary of state, state superintendent of education and commissioner of administration.
Gov. John Bel Edwards, a Democrat, approved a measure banning TikTok on networks controlled by executive agencies through a directive in the Division of Administration, according to Jacques Berry, the director of policy and communications for the office.
In Louisiana, other elected statewide officials may still use the video sharing app, though some have already banned it.
Louisiana Secretary of State Kyle Ardoin announced Dec. 19, 2022 a ban on TikTok for devices owned or leased by his agency. The Louisiana Secretary of State oversees elections, business services and some state certifications, among other things.
Ardoin has also advocated for a statewide ban for TikTok on government devices.
“I write to strongly urge you to ban the use of TikTok on all devices owned or leased by the state of Louisiana, following the lead of governors in Alabama, North Dakota, South Dakota, Iowa, Maryland, Texas, Utah and Virginia,” Ardoin said in a letter to Edwards published by a group of local TV stations.
On Jan. 3, Louisiana Superintendent of Education Cade Brumley issued new guidance for schools suggesting they limit their use of the app.
“I am advising schools and school systems to immediately remove TikTok or any other applications developed by ByteDance Limited from any publicly-funded devices,” wrote Brumley in a letter to school administrators. “Further, I am recommending that TikTok be eliminated as a communication outlet for school systems and schools including co-curricular clubs, extracurricular organizations and sports teams.”
West Virginia
West Virginia Auditor JB McCuskey, a Republican, announced Dec. 19, 2022, a ban on TikTok for government-issued devices and computer networks associated with the auditor’s office. The West Virginia State Auditor’s Office is responsible for maintaining the state’s financial and payroll data.
“We have seen the threat that China and its government poses to our critical infrastructure and this move is a proactive approach to protect the taxpayers of West Virginia,” McCuskey said in a press release.
Montana
On Dec. 16, 2022, Montana Gov. Greg Gianforte sent a memo to Montana CIO Kevin Gilbertson and several executive agency directors outlining a ban on TikTok. The ban applies to all state-issued cellphones, laptops, tablets and other Internet-capable devices. It also bars any third-party group from using TikTok on the state’s behalf.
“Government’s chief responsibility is keeping its citizens safe and secure,” Gianforte wrote in the memo. “Use of TikTok on state devices poses a significant risk to the security of our state and Montanans’ sensitive data.”
Virginia
On Dec. 16, 2022, Virginia Gov. Glenn Youngkin signed an executive order banning apps from Tencent Holdings and ByteDance on state devices. The firms develop WeChat and TikTok, respectively. The ban affects any government-issued device and also bans any person from accessing an app from either company on any state-owned or operated wireless network.
“Safeguarding data and ensuring cybersecurity are increasingly important aspects of state government, as evidenced by the sensitive information held on state government servers, such as health records or tax information,” Youngkin wrote in the executive order.
Wyoming
Wyoming Gov. Mark Gordon on Dec. 15 announced via a memorandum to all state employees that TikTok should be permanently removed from state devices and blocked from state networks. The memorandum only specifically references TikTok and not other pieces of software or ByteDance.
“The risk is that TikTok may be compelled to share information with those who are adverse to Wyoming’s interests,” wrote Gordon. “Law enforcement warns that TikTok may not control its algorithm, allowing users’ devices to be compromised.”
Georgia
On Dec. 15, 2022, Georgia Gov. Brian Kemp sent a memo to state agency heads directing them to ban several apps including TikTok from state-owned devices. The order also bans products from the China-based Tencent Holdings (including WeChat) and Telegram, which was founded by two Russian brothers but is now based in Dubai, according to its company website.
Kemp cited policies at the federal departments of State, Defense and Homeland Security as well as recent comments on TikTok’s cybersecurity risks from FBI Director Chris Wray as inspiration for the new policy.
“The state of Georgia has a responsibility to prevent any attempt to access and infiltrate its secure data and sensitive information by foreign adversaries such as the (Chinese Communist Party),” Kemp wrote in the memo. “The CCP poses an ever present national security threat to the United States.”
New Hampshire
On Dec. 14, 2022, New Hampshire Gov. Chris Sununu signed an executive order banning several Chinese apps and services from being used on state-owned devices and networks. The order also bans working with some vendors for state businesses. The companies and products covered by the ban include TikTok, Huawei Technologies, ZTE Corp, Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, Dahua Technology Company, Alibaba and Tencent Holdings. Tencent operates Tencent QQ, QQ Wallet and the messaging app WeChat.
“New Hampshire is joining the growing list of states that have banned TikTok and other Chinese companies from state government devices and networks,” said Sununu in a press release. “This move will help preserve the safety, security and privacy of the citizens of New Hampshire.”
Idaho
Idaho Gov. Brad Little issued an executive order on Dec. 14, 2022, banning state officials from downloading or using the TikTok app or website on state-issued devices. The order also directs the state’s Office of Information Technology Services to block TikTok from being accessed on any state network.
“The communist Chinese government can use TikTok to collect critical information from our state and federal government, and we are taking this step to protect Idahoans and Americans from the sinister motives of a foreign government that does not share our values and seeks to weaken and manipulate our country,” Little said in a press release. “This new ban to eliminate TikTok from state-issued devices and networks will help protect national security and Idahoans’ data.”
North Dakota
North Dakota Gov. Doug Burgum banned TikTok from state-owned devices via executive order on Dec. 13, 2022. The order affects executive branch agencies and employees, barring them from visiting the TikTok website or downloading the app while either on state networks or using a state-issued device.
“Protecting citizens’ data is our top priority, and our IT professionals have determined, in consultation with federal officials, that TikTok raises multiple flags in terms of the amount of data it collects and how that data may be shared with and used by the Chinese government,” Burgum said in a press release.
Iowa
Iowa Gov. Kim Reynolds issued a directive on Dec. 13, 2022, to the state’s CIO to ban TikTok from state-owned devices and prohibit agencies from maintaining a TikTok account.
“It is clear that TikTok represents a national security risk to our country and I refuse to subject the citizens of Iowa to that risk,” said Reynolds in a press release. “They trust us with their personal and confidential information and we will take every step possible to protect it, including from the Chinese government.”
Alabama
Alabama Gov. Kay Ivey sent a memo to state agency heads on Dec. 12, 2022, alerting them to a request she made to Secretary of Information Technology Marty Redden to “update his agency’s policies to prevent TikTok from accessing the state IT network and state IT devices.”
In the memo, Ivey said having TikTok installed on state IT infrastructure “creates an unacceptable vulnerability to Chinese infiltration operations.”
Utah
Utah Gov. Spencer Cox on Dec. 12, 2022, told state employees to not “download or use the TikTok application or visit any TikTok website” via executive order. The order also banned state agencies from maintaining branded TikTok accounts as well as banning state contractors from visiting the platform on state-owned devices.
“China’s access to data collected by TikTok presents a threat to our cybersecurity,” said Cox in a press release. “As a result, we’ve deleted our TikTok account and ordered the same on all state-owned devices. We must protect Utahns and make sure that the people of Utah can trust the state’s security systems.”
Tennessee
The office of Tennessee Gov. Bill Lee has taken steps to block the app from state networks, according to a statement from the office given to WKRN, a Tennessee TV station.
“The state has also taken additional steps to block the access of TikTok on any (personal device) or state-owned device that connects to the state network,” an office spokesperson told the station in a story published Dec. 10.
Arkansas
In December 2022, Arkansas Gov. Asa Hutchins directed the state’s Division of Information Systems to prohibit TikTok on state-owned and issued devices and devices connected to the state network except for authorized use by law enforcement or for security purposes.
“TikTok’s data collection practices create a national security risk, and we will continue to ensure our state’s data remains secure,” Hutchins tweeted.
The governor’s decision came soon after FBI Director Christopher Wray reported that TikTok poses “national security concerns” in testimony before the House Committee on Homeland Security.
“We value the privacy of our employees and citizens and have determined we should follow the advice given by the Department of Homeland Security,” Arkansas DIS Director Jonathan Askins wrote in the memo.
Oklahoma
Oklahoma Gov. Kevin Stitt banned TikTok on state-owned devices via executive order on Dec. 8, 2022. The order bans executive branch employees from downloading or using TikTok’s app and website on state networks or state-issued Internet-capable devices. It also directs the state to blacklist the platform from state networks and state devices.
“Maintaining the cybersecurity of state government is necessary to continue to serve and protect Oklahoma citizens and we will not participate in helping the Chinese Communist Party gain access to government information,” said Stitt in a press release.
Texas
Texas Gov. Greg Abbot banned TikTok on state devices through an order to state agency heads on Dec. 7, 2022. Abbot further directed the state’s Department of Public Safety and Department of Information Resources to develop a model plan for other state agencies which must address the use of TikTok on personal devices with access to employees’ .gov email accounts and network-based restrictions for TikTok on personal devices while on state property, among other things outlined in a memo sent to agency heads.
“Under China’s 2017 National Intelligence Law, all businesses are required to assist China in intelligence work including data sharing, and TikTok’s algorithm has already censored topics politically sensitive to the Chinese Communist Party, including the Tiananmen Square protests,” wrote Abbot in his letters to state agency heads and legislative leadership.
Indiana Attorney General
On Dec. 7, 2022, Indiana Attorney General Todd Rokita announced a pair of lawsuits against TikTok. The first alleges that the app used misleading advertising to court children to use the app. The second asserts that TikTok misleadingly portrays its policies surrounding data sharing with the Chinese government.
“The TikTok app is a malicious and menacing threat unleashed on unsuspecting Indiana consumers by a Chinese company that knows full well the harms it inflicts on users,” Rokita said in a press release. “With this pair of lawsuits, we hope to force TikTok to stop its false, deceptive and misleading practices, which violate Indiana law.”
Maryland
Maryland’s Office of Security Management, headed by Chief Information Security Officer Chip Stewart, issued an emergency cybersecurity directive on Dec. 6, 2022, banning TikTok and several other applications and hardware brands from state networks.
In addition to TikTok, Maryland also banned hardware and software products from Chinese firms. These include Huawei Technologies, ZTE Corp., Tencent Holdings (which owns Tencent QQ, QQ Wallet and WeChat, among other things) and Alibaba (which owns AliPay). The directive also banned software from the Russian company Kaspersky Lab.
“This action represents a critical step in protecting Maryland state systems from the cybersecurity threats caused by foreign organizations,” said Stewart in a press release at the time.
South Carolina
South Carolina Gov. Henry McMaster sent a memo on Dec. 5, 2022, to the state’s Department of Administration head to permanently remove and block TikTok from all devices that are managed by the department.
“Federal law enforcement and national security officials have warned that TikTok poses a clear and present danger to its users, and a growing bipartisan coalition in Congress is pushing to ban access to TikTok in the United States,” wrote McMaster in the letter.
South Dakota
South Dakota Gov. Kristi Noem banned TikTok on state devices via executive order on Nov. 29, 2022. The order bans employees and agencies of the state from downloading or using TikTok’s app or website on any government-owned cellphone, laptop or other Internet-capable device. It also bans contractors from using the platform on state-owned or state-leased devices.
“South Dakota will have no part in the intelligence gathering operations of nations who hate us,” said Noem in a press release. “The Chinese Communist Party uses information that it gathers on TikTok to manipulate the American people, and they gather data off the devices that access the platform.”
South Dakota’s Bureau of Information and Telecommunications reports that it supports more than 4,000 cellphones and cell data cards.
Nebraska
Nebraska’s governor announced a ban on TikTok on state devices on Aug. 12, 2020.
“As an app owned by a company based in China, TikTok is legally obligated to provide data from its users to the country’s communist regime upon request,” said Ricketts in a press release. “To maintain the security of data owned by the state of Nebraska, and to safeguard against the intrusive cyber activities of China’s communist government, we’ve made the decision to ban TikTok on state devices.”
Florida Department of Financial Services
Florida’s Department of Financial Services banned TikTok on department-owned devices on Aug. 11, 2020, via a directive from Florida Chief Financial Officer Jimmy Patronis.
“The threat TikTok presents far outweighs any benefit the application could provide to official business of the agency and that is why I have decided to immediately ban the application from DFS devices and use of the app within our facilities,” said Patronis in a press release at the time.
Nikki Davidson contributed to this article.
Related stories
