As TikTok faces data-harvesting claims, spy agency warns Canadians to protect themselves
CBC
The man who oversees cybersecurity for the federal government says Canadians should be wary of apps that could leave their data in the "wrong hands" — a warning that comes as the wildly popular Chinese-owned social media app TikTok faces claims that it has spied on its users.
Sami Khoury, head of the Communications Security Establishment (CSE) Canadian Centre for Cyber Security, said users need to be aware of what they're agreeing to when they download an app, and should ask whether it enables access to their personal data.
"You have to ask yourself the question, do they need to access that information? Why does an application need to access all of my contact list? Why does it need to access my calendar, my email, my phone records, my [texts]?" he told CBC News.
"You layer on top of that the risk of connecting my 200 [contacts] with your 200 and then you have an aggregate ... of information. In some cases, it lands in places that don't live by the same principles of rule of law [and] respect for human rights."
TikTok, whose parent company ByteDance is based in China, has been accused of aggressive data harvesting. The European Union's data watchdog is investigating what it has called "transfers by TikTok of personal data to China".
The CSE said Canadians with commercially sensitive information on their devices should be especially cautious when granting access to their devices.
"Some platforms are responsible platforms where you potentially don't have to worry about the data falling into the hands of a nation state. But other platforms are too close to that line," Khoury said.
Prime Minister Justin Trudeau said last month the CSE was keeping an eye on TikTok.
"I think people are concerned about TikTok. I think people are obviously watching very carefully," he said. "The ... CSE is one of the best cybersecurity agencies in the world and they're watching very carefully."
So far, CSE hasn't issued an advisory against using TikTok — which claims a billion visits per month. Instead, it offers general advice to Canadians about social media.
Khoury said the CSE is now updating that guidance.
The U.S. already has banned federal employees from using the app on government-issued devices, citing national security concerns. A growing number of universities in the U.S. have also banned the social media platform on school-owned devices and networks.
Late last year, Republican Sen. Marco Rubio introduced a bill to ban TikTok in the United States entirely.
Evan Koronewski, a spokesperson for CSE, said it's closely watching what the U.S. and other allies are doing.
The Rachel Notley government's consumer carbon tax wound up becoming a weapon the UCP wielded to drum the Alberta NDP out of office. But that levy-and-repayment program, and the wide-ranging "climate leadership plan" around it, also stood as the NDP's boldest, provincial-reputation-altering move in their single-term tenure.