Plain Language, Stronger Protections: Lessons From The TikTok Privacy Investigation

The Office of the Privacy Commissioner of Canada led a joint investigation with provincial privacy regulators from Alberta, British Columbia, and Quebec into TikTok's collection, use, and disclosure of personal information of Canadians. The results of the joint investigation focused on ad targeting, content personalization, and the platform's treatment of children and youth. The investigation examined whether TikTok's practices complied with Canadian privacy laws, particularly whether valid, meaningful consent was obtained from users, especially minors.

Key findings that affect privacy policies

The regulators found that blanket statements buried in lengthy terms of use or privacy policies cannot substitute for clear, youth-appropriate transparency and consent mechanisms. Privacy policies must not hide essential information about profiling, tracking, behavioural advertising, or the use of biometrics. When profiling or advertising practices exceed reasonable