Court Rules
All enforcement actions
InvestigationLow RiskMultistate

46 State AGs Seek Court Order for TikTok Communications in Youth Mental Health Probe

TikTok, Inc.March 8, 2023Connecticut Attorney General

Summary

A coalition of 46 state attorneys general, led by Colorado and Tennessee, filed an amicus brief to compel TikTok to produce internal communications. The investigation examines whether TikTok's practices harm youth mental health through harmful content. TikTok is accused of failing to preserve and provide communications in a usable format.

Contract Impact

In-house legal teams should review vendor agreements with social media platforms (like TikTok) and any contracts involving user data sharing or youth-focused services. Specifically, examine clauses related to data preservation, document retention, cooperation with investigations, and production of electronic communications. Key areas include requirements to maintain internal communications (including instant messages on platforms like Lark) in a usable format, prohibitions on auto-deletion during investigations, and obligations to comply with regulatory requests for documents. Consider adding or strengthening terms that mandate legal holds, specify acceptable production formats, and impose penalties for non-compliance to ensure vendors preserve and produce relevant evidence during multistate or regulatory probes.

Contract Search Terms

data preservation clauselitigation holddocument retention policyelectronic discoveryinternal communications productioninstant messaging retentioncompliance with investigationsdeletion policiesusable format requirementcooperation with regulators

Violation Types

Entity Details

Entity

TikTok, Inc.

Also known as: TikTok

Industry

Social Media

Multistate Coalition

Alabama AGAlaska AGArizona AGArkansas AGCalifornia AGDelaware AGDC AGFlorida AGGeorgia AGHawaii AGIdaho AGIllinois AGIndiana AGIowa AGKentucky AGLouisiana AGMaine AGMaryland AGMassachusetts AGMichigan AGMinnesota AGMississippi AGMissouri AGMontana AGNebraska AGNevada AGNew Hampshire AGNew Jersey AGNew Mexico AGNew York AGNorth Carolina AGNorth Dakota AGOklahoma AGOregon AGPennsylvania AGRhode Island AGSouth Carolina AGSouth Dakota AGTexas AGUtah AGVermont AGVirginia AGWisconsin AGWyoming AGHawaii Office of Consumer Protection

Official Sources

Related Enforcement Actions

CT

SunRun, Inc.

$500K

Connecticut Attorney General William Tong announced settlements with SunRun, Inc., Elevate Solar Solutions, and two salespeople over allegations of deceptive solar sales, including impersonating consumers and locking homeowners into long-term contracts without consent. SunRun must pay $300,000 and provide consumer relief; Elevate and the salespeople face a stated $200,000 penalty, with $100,000 suspended subject to ongoing compliance.

CT

Mylan

$8.0M

Connecticut announced an $8 million settlement with Mylan over allegations that it used agreements to delay generic EpiPen competitors and took other actions that inflated prices. Mylan also agreed to provide 10,000 free EpiPens; the release states that Mylan denies wrongdoing.

CT

U.S. Department of Homeland Security

Connecticut Attorney General William Tong joined a coalition of 22 attorneys general in filing an amicus brief challenging DHS’s policy and practice of conducting warrantless civil immigration arrests. The press release describes a court challenge, not a privacy enforcement action or monetary penalty.

CT

Frontier Communications Parent Inc.

$625K

Connecticut reached a $625,000 settlement with Frontier Communications Parent Inc. over an April 2024 breach in which compromised employee and vendor credentials were used to access internal systems and exfiltrate unencrypted personal information of 58,841 Connecticut residents. The settlement requires Frontier to strengthen its security program, implement specific safeguards and training, and obtain an independent third-party assessment.

CT

Boston Children’s Health Physicians and XTIUM

$2.6M

Connecticut and New York found that Boston Children’s Health Physicians and its security vendor, XTIUM, failed to use reasonable safeguards, resulting in hackers accessing sensitive personal, medical, and employee information. The companies agreed to pay penalties totaling $2.64 million and implement enhanced cybersecurity measures.

CT

Character Technologies, Inc.

Connecticut joined a coalition of state attorneys general filing a notice in Character Technologies, Inc.’s bankruptcy proceedings, raising concerns about the company’s safety and privacy practices and the sensitive information it holds. The states seek protections for children and consumers if the company’s business or assets are sold or transferred; the filing does not impose a fine or other remedy.