Apps

Some IRS employees still access TikTok despite ban on government devices

Comment

TikTok logo encircled by a "prohibited" symbol
Image Credits: TechCrunch

The TikTok ban on U.S. government devices is proving hard to enforce. A month after the IRS was found to be in non-compliance with the federally mandated ban on the Beijing-based video app, two Republican senators are asking the IRS why it’s still allowing some of the agency’s employees to access the social network, and what that means for the security of Americans’ IRS data.

The letter, announced today, was sent to the IRS on Thursday by U.S. Senators Marsha Blackburn (R-TN), a member of the Subcommittee on Taxation and IRS Oversight, and John Thune (R-SD), ranking member of the Subcommittee on Taxation and Internal Revenue Service (IRS) Oversight. In it, they press the IRS to respond to questions about why the ban is not being upheld, suggesting that the confidential nature of taxpayer data could be compromised by TikTok’s data collection practices.

In fact, The Wall Street Journal reported today that TikTok employees still sometimes shared data with their China-based parent company ByteDance, despite the operation code-named “Project Texas” that TikTok implemented to keep U.S. user data on Oracle servers in the states. That initiative had been designed to convince the U.S. government that U.S. user data was safe. The WSJ found that, instead, managers would sometimes instruct employees at TikTok to share data with others through unofficial channels, including private data, like a user’s email, birth date or IP address.

The timing of the report around IRS use of TikTok may raise concern among lawmakers that TikTok’s U.S. user data isn’t as protected as once hoped. It also demonstrates how unenforceable such bans could be amid the U.S. government’s bureaucracy and red tape, offering a preview of what it could be like to enforce such a ban at the federal level for all Americans — a move that some politicians from both parties believe should take place.

As for the IRS, a report from the Treasury Inspector General for Tax Administration (TIGTA) last month found that the IRS’ Criminal Investigation unit’s staff were still able to access TikTok on both their computers and mobile devices, long after The Office of Management and Budget (OMB) issued its “No TikTok on Government Devices” guidance in February 2023. The IRS hadn’t asked for the Criminal Investigation division to be exempt from the ban through official channels, nor had it cut off employees’ TikTok access, the report said.

The IRS countered it didn’t need an exception because the TikTok app was only used via third-party software — in other words, their devices weren’t directly connecting with TikTok. It also pushed back at the idea that the Criminal Investigation division chief should come up with a plan to fully cut off employee access to the app, saying it would use its own internal process to determine exceptions. In total, 2,800 mobile devices in the division were found to be able to access TikTok, TIGTA said.

In other areas, the IRS largely complied with the ban. When TIGTA found that TikTok was accessible on 23 phones used by employees in the Communications and Liaison group, which monitors social media, they were cut off from the app. The agency also said that it would update its “Bring Your Own Device” (BYOD) policy guidance to align with the ban by October 2024.

In the senators’ letter to TikTok, they pressed the IRS on its delay for implementing the ban within its BYOD program and the exception made for Criminal Investigation staff, writing, “Not only has the IRS failed to comply with the law, but its lack of action with regard to implementation of the No TikTok on Government Devices Act has potentially compromised confidential taxpayer information located on devices that have TikTok, which has close ties to the Chinese Communist Party and alarming data practices.”

The letter asks the IRS to respond to a series of questions by February 8, 2024. These include questions about how many IRS employees use their own devices, how many of those access TikTok with the same devices they use for IRS-related functions and what security protocols IRS employees must follow to protect taxpayer data, among other things. The senators also want to know if the IRS has removed TikTok from the Criminal Investigation mobile devices, and why they needed it in the first place.

TikTok has been asked for comment, but one was not provided by the time of publication.

The IRS is only one facet of the wider U.S. TikTok ban on government devices, which last February gave government agencies 30 days to ensure they no longer had the app on their employees’ phones and computers. The order had followed similar bans from dozens of U.S. states and others from outside the U.S., including the EU, Canada, India and more. However, many bans are being challenged in the courts. For instance, Montana’s ban on TikTok is now on hold, a federal judge ruled last month.

Letter to Daniel Werfel Commissioner, Internal Revenue Service by TechCrunch on Scribd

More TechCrunch

Maad, a B2B e-commerce startup based in Senegal, has secured $3.2 million debt-equity funding to bolster its growth in the western Africa country and to explore fresh opportunities in the…

Maad raises $3.2M seed amid B2B e-commerce sector turbulence in Africa

The fresh funds were raised from two investors who transferred the capital into a special purpose vehicle, a legal entity associated with the OpenAI Startup Fund.

OpenAI Startup Fund raises additional $5M

Accel has invested in more than 200 startups in the region to date, making it one of the more prolific VCs in this market.

Accel has a fresh $650M to back European early-stage startups

Kyle Vogt, the former founder and CEO of self-driving car company Cruise, has a new VC-backed robotics startup focused on household chores. Vogt announced Monday that the new startup, called…

Cruise founder Kyle Vogt is back with a robot startup

When Keith Rabois announced he was leaving Founders Fund to return to Khosla Ventures in January, it came as a shock to many in the venture capital ecosystem — and…

From Miles Grimshaw to Eva Ho, venture capitalists continue to play musical chairs

On the heels of OpenAI announcing the latest iteration of its GPT large language model, its biggest rival in generative AI in the U.S. announced an expansion of its own.…

Anthropic is expanding to Europe and raising more money

If you’re looking for a Starliner mission recap, you’ll have to wait a little longer, because the mission has officially been delayed.

TechCrunch Space: You rock(et) my world, moms

Apple devoted a full event to iPad last Tuesday, roughly a month out from WWDC. From the invite artwork to the polarizing ad spot, Apple was clear — the event…

Apple iPad Pro M4 vs. iPad Air M2: Reviewing which is right for most

Terri Burns, a former partner at GV, is venturing into a new chapter of her career by launching her own venture firm called Type Capital. 

GV’s youngest partner has launched her own firm

The decision to go monochrome was probably a smart one, considering the candy-colored alternatives that seem to want to dazzle and comfort you.

ChatGPT’s new face is a black hole

Apple and Google announced on Monday that iPhone and Android users will start seeing alerts when it’s possible that an unknown Bluetooth device is being used to track them. The…

Apple and Google agree on standard to alert people when unknown Bluetooth devices may be tracking them

The company is describing the event as “a chance to demo some ChatGPT and GPT-4 updates.”

OpenAI’s ChatGPT announcement: Watch here

A human safety operator will be behind the wheel during this phase of testing, according to the company.

GM’s Cruise ramps up robotaxi testing in Phoenix

OpenAI announced a new flagship generative AI model on Monday that they call GPT-4o — the “o” stands for “omni,” referring to the model’s ability to handle text, speech, and…

OpenAI debuts GPT-4o ‘omni’ model now powering ChatGPT

Featured Article

The women in AI making a difference

As a part of a multi-part series, TechCrunch is highlighting women innovators — from academics to policymakers —in the field of AI.

14 hours ago
The women in AI making a difference

The expansion of Polar Semiconductor’s facility would enable the company to double its U.S. production capacity of sensor and power chips within two years.

White House proposes up to $120M to help fund Polar Semiconductor’s chip facility expansion

In 2021, Google kicked off work on Project Starline, a corporate-focused teleconferencing platform that uses 3D imaging, cameras and a custom-designed screen to let people converse with someone as if…

Google’s 3D video conferencing platform, Project Starline, is coming in 2025 with help from HP

Over the weekend, Instagram announced that it is expanding its creator marketplace to 10 new countries — this marketplace connects brands with creators to foster collaboration. The new regions include…

Instagram expands its creator marketplace to 10 new countries

You can expect plenty of AI, but probably not a lot of hardware.

Google I/O 2024: What to expect

The keynote kicks off at 10 a.m. PT on Tuesday and will offer glimpses into the latest versions of Android, Wear OS and Android TV.

Google I/O 2024: How to watch

Four-year-old Mexican BNPL startup Aplazo facilitates fractionated payments to offline and online merchants even when the buyer doesn’t have a credit card.

Aplazo is using buy now, pay later as a stepping stone to financial ubiquity in Mexico

We received countless submissions to speak at this year’s Disrupt 2024. After carefully sifting through all the applications, we’ve narrowed it down to 19 session finalists. Now we need your…

Vote for your Disrupt 2024 Audience Choice favs

Co-founder and CEO Bowie Cheung, who previously worked at Uber Eats, said the company now has 200 customers.

Healthy growth helps B2B food e-commerce startup Pepper nab $30 million led by ICONIQ Growth

Booking.com has been designated a gatekeeper under the EU’s DMA, meaning the firm will be regulated under the bloc’s market fairness framework.

Booking.com latest to fall under EU market power rules

Featured Article

‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

Estate is an invite-only website that has helped hundreds of attackers make thousands of phone calls aimed at stealing account passcodes, according to its leaked database.

19 hours ago
‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts

Squarespace is being taken private in an all-cash deal that values the company on an equity basis at $6.6 billion.

Permira is taking Squarespace private in a $6.9 billion deal

AI-powered tools like OpenAI’s Whisper have enabled many apps to make transcription an integral part of their feature set for personal note-taking, and the space has quickly flourished as a…

Buy Me a Coffee’s founder has built an AI-powered voice note app

Airtel, India’s second-largest telco, is partnering with Google Cloud to develop and deliver cloud and GenAI solutions to Indian businesses.

Google partners with Airtel to offer cloud and GenAI products to Indian businesses

To give AI-focused women academics and others their well-deserved — and overdue — time in the spotlight, TechCrunch has been publishing a series of interviews focused on remarkable women who’ve contributed to…

Women in AI: Rep. Dar’shun Kendrick wants to pass more AI legislation

We took the pulse of emerging fund managers about what it’s been like for them during these post-ZERP, venture-capital-winter years.

A reckoning is coming for emerging venture funds, and that, VCs say, is a good thing