Government & Policy

ByteDance gets 24 hours to show EU a DSA risk assessment for TikTok Lite

Comment

TikTok logo seen on an Android mobile device screen with the European Union (EU) flag in the background.
Image Credits: Chukrut Budrul/SOPA Images/LightRocket / Getty Images

TikTok owner ByteDance is facing fresh questions about its compliance with the European Union’s Digital Services Act (DSA), an online governance and content moderation framework that puts a legal obligation on larger platforms to mitigate systemic risks in areas like youth mental health.

The EU’s latest concerns about TikTok’s DSA compliance center on the launch of TikTok Lite. This is a version of the video sharing app which recently launched (“test launched”, per TikTok) in France and Spain — letting users over 18 years old there earn points for certain in-app activities, such as liking content or following new creators. TikTok says these points can be redeemed for gift cards or “coins” that can be gifted to creators.

The reward-linked engagement feature looks to have triggered concern in the EU about potentially addictive design which could have a negative impact on young people’s mental health. The European Commission oversees platforms’ compliance with DSA system risk requirements.

In a press release announcing the request for information (RFI), the Commission said it’s asked TikTok for more details on the risk assessment it should have carried out before deploying the new app in the EU.

“This concerns the potential impact of the new ‘Task and Reward Lite’ programme on the protection of minors, as well as on the mental health of users, in particular in relation to the potential stimulation of addictive behaviour,” it wrote, adding that it’s also requesting info about the measures TikTok has put in place to mitigate such systemic risks.

TikTok has been given 24 hours to provide the risk assessment for TikTok Lite. It has until April 26 to provide other requested information, after which the Commission said it will analyse its reply and assess next steps, such as whether or not to open a formal investigation.

Reached for comment on the Commission’s RFI, a TikTok spokesperson said: “We have already been in direct contact with the Commission regarding this product and will respond to the request for information.”

ByteDance, which owns TikTok, is one of around two dozen larger online platforms that are subject to the strictest layer of DSA rules — requiring them to take steps to mitigate systemic risks use of their platforms could cause. Penalties for failing to comply with the regulation can reach up to 6% of global annual turnover which could lead to some hefty fines for TikTok for any confirmed compliance failures.

The wider impact of the pan-EU regulation is likely to be on platforms’ product design choices, with EU enforcers having powers that could potentially force the reform of entire business models if they’re found to have toxic impacts.

TikTok is already under investigation in the EU in relation to a number of DSA obligations, including in the area of protection of minors and the risk management of addictive design and harmful content, after the Commission announced a formal probe back in February. But the latest RFI suggests the EU is worried there are more issues of concern.

It’s particularly interesting to see the Commission intervening so swiftly after a tentative product release — as the TikTok Lite app only appears to have been live in the two markets for a very brief period. The Commission says it launched this month. (And here, for example, is a Spanish YouTube video on the reward feature which was posted just under a week ago where the vlogger says the program for earning money “just by watching videos” has only just been made available, and so far only on some Android devices.)

It’s not clear whether TikTok conducted a DSA risk assessment for the new reward program ahead of launching TikTok Lite in the two EU markets. A TikTok spokesman did not respond when we asked about that. But the regulation’s focus on systemic risk essentially makes such a step obligatory for features that are likely to appeal to minors.

TikTok did tell us it requires TikTok Lite users to verify that they are 18 or older in order to collect points through their use of the app. Asked about the robustness of the age verification technology it’s using, its spokesman said the processes involved can include things like “submitting a selfie with a photo ID (e.g passport or drivers license), credit card authorisations etc”.

Other restrictions on the reward program TikTok highlighted are a maximum limit on rewards it said is “roughly” equivalent to €1 per day. It also said there’s a maximum daily video time limit for rewards of one hour — so, presumably, you can only earn points for one hour’s worth of video watching, after which you won’t accrue any more points that day.

How clearly such limits are communicated to TikTok Lite users may be one area of interest to EU enforcers as they ask the platform about its design choices.

“VLOPs [very large online platforms] and VLOSEs [very large online search engines] are obliged to carry out risk assessments prior to deploying functionalities that are likely to have a critical impact on risks to, for example, the mental well-being of the users and send this assessment to the Commission without undue delay,” a Commission spokesperson told us.

Consumer groups in Europe have previously raised concerns about various aspects of TikTok’s platform design, including its use of virtual currency to create engagement incentives. Complaints raised back in 2021 were funnelled through the Consumer Protection Cooperation Network, with the Commission involved in encouraging a dialogue between the two sides. Then, in June 2022, the procedure culminated in TikTok offering a series of commitments — including pledging to boost transparency around its digital coins and virtual gifts.

However judging by the Commission’s oversight of TikTok’s approach to DSA compliance the platform may need to go further to satisfy enforcers of the rebooted EU Internet rulebook, which came fully into force this February — but with systemic risk elements expected to be respected as of late August 2023.

This report was updated with comment from the Commission

EU opens formal probe of TikTok under Digital Services Act, citing child safety, risk management and other concerns

More TechCrunch

Tags

HealthEquity said in an 8-K filing with the SEC that it detected “anomalous behavior by a personal use device belonging to a business partner.”

HealthEquity says data breach is an ‘isolated incident’

Roll20 said that on June 29 it had detected that a “bad actor” gained access to an account on the company’s administrative website for one hour.

Roll20, an online tabletop role-playing game platform, discloses data breach

Fisker has a willing buyer for its remaining inventory of all-electric Ocean SUVs, and has asked the Delaware Bankruptcy Court judge overseeing its Chapter 11 case to approve the sale.…

Fisker asks bankruptcy court to sell its EVs at average of $14,000 each

Teddy Solomon just moved to a new house in Palo Alto, so he turned to the Stanford community on Fizz to furnish his room. “Every time I show up to…

Fizz, the anonymous Gen Z social app, adds a marketplace for college students

With increasing competition for what is, essentially, still a small number of hard tech and deep tech deals, Sidney Scott realized it would be a challenge for smaller funds like…

Why deep tech VC Driving Forces is shutting down

A guide to turn off reactions on your iPhone and Mac so you don’t get surprised by effects during work video calls.

How to turn off those silly video call reactions on iPhone and Mac

Amazon has decided to discontinue its Astro for Business device, a security robot for small- and medium-sized businesses, just seven months after launch.  In an email sent to customers and…

Amazon retires its Astro for Business security robot after only 7 months

Hiya, folks, and welcome to TechCrunch’s regular AI newsletter. This week in AI, the U.S. Supreme Court struck down “Chevron deference,” a 40-year-old ruling on federal agencies’ power that required…

This Week in AI: With Chevron’s demise, AI regulation seems dead in the water

Noplace had already gone viral ahead of its public launch because of its feature that allows users to express themselves by customizing the colors of their profile.

noplace, a mashup of Twitter and Myspace for Gen Z, hits No. 1 on the App Store

Cloudflare analyzed AI bot and crawler traffic to fine-tune automatic bot detection models.

Cloudflare launches a tool to combat AI bots

Twilio says “threat actors were able to identify” phone numbers of people who use the two-factor app Authy.

Twilio says hackers identified cell phone numbers of two-factor app Authy users

The news brings closure to more than two years of volleying back and forth between some of the biggest names in additive manufacturing.

Nano Dimension is buying Desktop Metal

Planning to attend TechCrunch Disrupt 2024 with your team? Maximize your team-building time and your company’s impact across the entire conference when you bring your team. Groups of 4 to…

Groups save big at TechCrunch Disrupt 2024

As more music streaming apps and creation tools emerge to compete for users’ attention, social music-sharing app Popster is getting two new features to grow its user base: an AI…

Music video-sharing app Popster uses generative AI and lets artists remix videos

Meta’s Threads now has more than 175 million monthly active users, Mark Zuckerberg announced on Wednesday. The announcement comes two days away from Threads’ first anniversary. Zuckerberg revealed back in…

Threads nears its one-year anniversary with more than 175M monthly active users

Cartken and its diminutive sidewalk delivery robots first rolled into the world with a narrow charter: carrying everything from burritos and bento boxes to pizza and pad thai that last…

From burritos to biotech: How robotics startup Cartken found its AV niche

Ashwin Nandakumar and Ashwin Jainarayanan were working on their doctorates at adjacent departments in Oxford, but they didn’t know each other. Nandakumar, who was studying oncology, one day stumbled across…

Granza Bio grabs $7M seed from Felicis and YC to advance delivery of cancer treatments

LG has acquired an 80% stake in Athom, a Dutch smart home company and maker of the Homey smart home hub. According to LG’s announcement, it will purchase the remaining…

LG acquires smart home platform Athom to bring third-party connectivity to its ThinQ ecosytem

CoinDCX, India’s leading cryptocurrency exchange, is expanding internationally through the acquisition of BitOasis, a digital asset platform in the Middle East and North Africa, the companies said Wednesday. The Bengaluru-based…

CoinDCX acquires BitOasis in international expansion push

Collaborative document features are being made available inside Proton Drive, further extending the company’s trademark pitch of robust security.

In a major update, Proton adds privacy-safe document collaboration to Drive, its freemium E2EE cloud storage service

Telegram launched a digital currency called Stars for in-app use last month. Now, the company is expanding its use cases to paid content. The chat app is also allowing channels…

Telegram lets creators share paid content to channels

For the past couple of years, innovation has been accelerating in new materials development. And a new French startup called Altrove plans to play a role in this innovation cycle.…

Altrove uses AI models and lab automation to create new materials

The Indian social media platform Koo, which positioned itself as a competitor to Elon Musk’s X, is ceasing operations after its last-resort acquisition talks with Dailyhunt collapsed. Despite securing over…

Indian social network Koo is shutting down as buyout talks collapse

Apiday leverages AI to save time for its customers. But like legacy consultants, it also offers human expertise.

Europe is still serious about ESG, and Apiday is helping companies comply

Google totally dodges the question of how much energy is AI is using — perhaps because the answer is “way more than we’d care to say.”

Google’s environmental report pointedly avoids AI’s actual energy cost

SpaceX’s ambitious plans to launch its Starship mega-rocket up to 44 times per year from NASA’s Kennedy Space Center are causing a stir among some of its competitors. Late last…

SpaceX wants to launch up to 120 times a year from Florida — and competitors aren’t happy about it

The situation around a data breach that’s affected an ever-growing number of fintech companies has gotten even weirder. Evolve Bank & Trust announced last week that it was hacked and…

Newsletter writer covering Evolve Bank’s data breach says the bank sent him a cease and desist letter

The new bylines go beyond the typical @username references that often accompany link posts from news publications and those pointing to other written content, like a WordPress blog or Substack

Twitter/X alternative Mastodon appeals to journalists with new ‘byline’ feature

code references found in the X iOS app indicate that the company could be considering adding downvotes for replies only to improve how they’re ranked.

X weighs adding a downvote button to replies — but it doesn’t want to emulate Reddit

Evolve, a popular financial institution for fintech startups, announced that a cyberattack affected “the data and personal information of some Evolve retail bank customers and financial technology partners’ customers.” 

Yieldstreet says some of its customers were affected by the Evolve Bank data breach
  翻译: