Taiwan’s National Security Bureau (NSB) has issued a formal public alert regarding significant data security risks posed by several Chinese social media applications, including TikTok (Douyin), Weibo, and RedNote (Xiaohongshu). The advisory follows a comprehensive review of these platforms’ data handling practices and their close ties to China, raising concerns about privacy and national security.
Comprehensive Security Assessment
The NSB, in collaboration with the Ministry of Justice Investigation Bureau and the Criminal Investigation Bureau, conducted an extensive evaluation of five widely used Chinese apps: TikTok, Weibo, RedNote, WeChat, and Baidu Cloud. The assessment was based on 15 security indicators across five critical categories:
- Personal data collection
- Permissions usage
- Data transmission and sharing
- System information extraction
- Access to biometric data (including facial recognition)
Key Findings
The results of the investigation were alarming:
- RedNote failed all 15 security indicators, making it the most concerning application in terms of data security.
- Weibo and TikTok each failed 13 out of 15 indicators.
- WeChat failed 10, while Baidu Cloud failed 9 indicators.
- The NSB highlighted that these apps collect sensitive information, such as users’ facial scans and contact lists, and transmit this data to servers located in China.
According to the NSB, the data collection practices of these applications “far exceed reasonable expectations for data-collection practices typically adhered to by ordinary applications.”
Public Advisory and National Security Implications
In light of these findings, the NSB has urged the Taiwanese public to exercise heightened caution when using Chinese-developed social media platforms. The bureau emphasized the potential risks of privacy breaches and the possibility of personal data being accessed by Chinese authorities, which could have broader implications for Taiwan’s national security.
This warning aligns with increasing global scrutiny of Chinese technology companies and their data privacy practices, particularly amid concerns over government surveillance and the misuse of personal information.
