This biometric data that TikTok can collect includes faceprints and voiceprints. Make what you will of this.
The first part of the new section that’s been added explains that TikTok may collect information about audio and images that are in users’ content such as - “identifying the objects and scenery that appear, the existence and location within an image of face and body features and attributes, the nature of the audio, and the text of the words spoken in your User Content.”
While this does sound creepy, this is not surprising since other social networks also do “object recognition” on images that you upload to power accessibility features like describing what’s in the photo for the visually impaired. This is also done for ad targeting purposes. Also, identifying where a person and the scenery can help with AR effects and converting spoken words helps with features like TikTok’s automatic captions.
TikTok has also explained that this data collection is for enabling “special video effects, for content moderation, for demographic classification, for content and ad recommendations, and for other non-personally-identifying operations”.
What is more concerning is the plan to collect biometric data, as TikTok states - “We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your User Content. Where required by law, we will seek any required permissions from you prior to any such collection”.
As TechCrunch points out, this statement is vague as it does not specify whether TikTok is considering federal laws or state laws, or both. The platform also does not explain why it needs this data. They also have not defined the terms “faceprints” and “voiceprints” and have not mentioned how exactly they are going to seek the “required permission” from users, or if they are going to look at either federal or state laws to guide this process of gaining consent.
Only a few US states have biometric privacy laws, including Washington, California, Texas, New York, and Illinois. If TikTok requests consent “where required by law”, it means that in other states where there are no biometric privacy laws, users will have no have to be informed about this data collection.