EXECUTIVE SUMMARY
On January 22-23, 2026, TikTok’s U.S. operation transferred to a new entity, TikTok USDS Joint Venture LLC, and simultaneously implemented privacy policy changes that expanded data collection. This assessment documents the ownership structure, governance roles, policy changes, and democratic risks arising when surveillance-capable actors gain oversight of a platform that collects location data, AI interaction logs, and cross-platform tracking information.
Key Finding: The combination of expanded data collection and governance by entities with documented surveillance capabilities or ties to authoritarian states creates systematic risks to speech, privacy, and democratic participation.
OWNERSHIP AND CONTROL STRUCTURE
Confirmed Ownership (TikTok USDS JV)
Oracle: 15% (managing investor, trusted security partner)
Silver Lake: 15% (managing investor)
MGX: 15% (managing investor, board seat, security committee representation)
ByteDance: 19.9% (retained stake, algorithm licensing)
Additional investors: Dell Family Office, Vastmere Strategic Investments (reported as Susquehanna affiliate), Alpha Wave Partners, Revolution, Merritt Way (Dragoneer), Via Nova (General Atlantic affiliate), Virgo LI, NJJ Capital
Control Functions
USDS JV states Oracle will host U.S. user data in its secure U.S. cloud, assist in retraining the recommendation algorithm on U.S. user data, and retain decision authority for trust and safety and content moderation decisions.
ByteDance Continuity
ByteDance retains 19.9% ownership. Public reporting indicates that the U.S. entity licenses and adapts the algorithm under operational constraints, while maintaining ByteDance’s involvement through intellectual property and technical dependencies.
THREE PRIVACY POLICY EXPANSIONS (JANUARY 2026)
1. Precise Location Collection
TikTok’s updated policy now permits the collection of approximate or precise location via device GPS if users enable location services. The Federal Trade Commission has repeatedly warned that precise location data can expose visits to reproductive health clinics, places of worship, domestic violence shelters, and political organizing locations.
2. AI Interaction Logging
The policy explicitly covers interactions with TikTok AI tools, including prompts, questions, uploaded files, generated responses, and metadata (timestamps, location). Users creating AI interaction records generate durable data trails documenting questions, concerns, and information-seeking behavior.
3. Expanded Ad-Network Tracking
The policy describes using partner data and delivering ads through TikTok Ad Network “elsewhere online” depending on settings. This enables cross-platform identity stitching and behavioral profiling beyond TikTok’s application boundaries.
GOVERNANCE ROLES AND DOCUMENTED CAPABILITIES
Oracle: Infrastructure Custody and Algorithm Access
Oracle founder Larry Ellison has publicly praised AI-enabled mass surveillance systems. As a “trusted security partner,” Oracle controls data-hosting infrastructure and participates in algorithm-review and retraining processes, creating access points for both technical observation and operational influence.
In September 2024, Ellison described AI surveillance systems that would monitor citizens constantly, stating 'Citizens will be on their best behavior because we are constantly recording and reporting everything that's going on.
MGX: State-Linked Governance
Confirmed Structure: MGX holds 15% ownership, a board seat, and security committee representation through David Scott
Leadership: MGX is chaired by Sheikh Tahnoon bin Zayed Al Nahyan, the UAE’s national security adviser
Regional Context: Citizen Lab has documented Pegasus spyware operations linked to Saudi Arabia and the UAE, including targeting of Al Jazeera journalists and Saudi dissident Omar Abdulaziz. Human Rights Watch has warned about mass surveillance infrastructure in the UAE and spyware use against dissidents.
This creates a governance scenario in which entities with documented surveillance capabilities and authoritarian state coordination gain oversight and a financial stake in a platform whose data collection expands simultaneously.
ByteDance Investor Network Overlap
Two USDS JV investors have documented ties to ByteDance’s existing investor base:
Susquehanna International Group (represented via Vastmere) has been identified as a major ByteDance investor
General Atlantic (represented via Via Nova) has been reported as a ByteDance board-level investor
What Happens When Surveillance Infrastructure Meets Social Media
The TikTok deal didn’t eliminate foreign access concerns; it redistributed oversight to entities with documented surveillance capabilities while simultaneously expanding data collection.
This isn’t speculation. In January 2026, TikTok’s ownership transferred to a joint venture that includes:
A state-linked investor whose chair serves as the UAE’s national security adviser
A tech company whose founder has publicly praised mass AI surveillance
Retained ByteDance involvement through algorithm licensing
At the same moment, TikTok’s privacy policy expanded to permit precise location tracking, AI interaction logging, and cross-platform behavioral profiling.
What that combination means for your speech, your privacy, and your organizing:
Premium members get the full TikTok Case File: ownership structure with receipts, the three simultaneous policy expansions, documented surveillance capabilities of governance entities, threat assessments for journalists/activists/healthcare seekers, and concrete harm-reduction measures, including device-level controls.
[Upgrade to read the full Case File]
