Federal Contractor Ban on TikTok – What You Need to Know-Federal Contractor Ban on TikTok

Federal Contractor Ban on TikTok – What You Need to Know Slides

Pdf Summary

This educational presentation by Jeremy D. Burkhart of Holland & Knight LLP addresses the new federal rules regulating the use of TikTok by employees of government contractors, focusing on FAR 52.204-27, an interim rule enacted in 2023. The rule prohibits the presence or use of ByteDance-owned TikTok on any information technology (IT) involved in the performance of federal contracts, including contractor-owned and employee-provided devices used "to a significant extent" in contract work.<br /><br />The concern driving these regulations stems from TikTok's Chinese ownership and potential access by the Chinese government to user data, raising national security risks such as spying and propaganda. Congress passed the "No TikTok on Government Devices Act," which directed the Office of Management and Budget (OMB) to issue guidelines (OMB Memorandum M-23-13), and the FAR Council implemented these restrictions via FAR 52.204-27.<br /><br />Key legal ambiguities remain about the scope of the prohibition, especially regarding personal devices that employees use for federal contract work but are not explicitly required by contract terms. The FAR clause language and Federal Register comments suggest a broad application, including Bring Your Own Device (BYOD) programs, possibly extending the ban to personal cell phones used even to a minimal extent for contract performance. This broad interpretation goes beyond the statute and OMB memo, causing a dilemma for contractors between strict statutory interpretation and a conservative risk-averse approach.<br /><br />Contractors must identify affected devices, flow down FAR provisions to subcontractors, update policies, educate employees, and consult IT professionals for technical enforcement such as blocking TikTok or remotely removing it. Noncompliance risks include audits, negative performance evaluations, contract termination, suspension, debarment, and False Claims Act liability.<br /><br />Best practices include establishing clear policies on TikTok removal, requiring employee acknowledgment, using container management to isolate work data on personal devices, and maintaining robust cybersecurity measures. Given ongoing ambiguities and potential expanded government enforcement, companies should balance regulatory compliance, employee privacy, and security priorities while monitoring future rule clarifications.

Keywords

TikTok federal regulations

FAR 52.204-27

government contractors

ByteDance TikTok ban

No TikTok on Government Devices Act

OMB Memorandum M-23-13

national security risks

BYOD TikTok prohibition

contractor compliance requirements

cybersecurity best practices