TikTok CEO says China-based ByteDance employees still have access to some U.S. data

TikTok CEO Shou Zi Chew told U.S. lawmakers that China-based employees at its parent company ByteDance may still have access to some U.S. data from the app but added that won’t be the case once its risk mitigation plan, called Project Texas, is complete.

The exchange is significant because it gets at the crux of U.S. officials’ fears about TikTok’s ownership and also shows how tricky and time-consuming untangling the app from its Chinese parent company can be.

Lawmakers and intelligence officials fear that U.S. user data could get into the hands of the Chinese government via ByteDance. That’s because Chinese law allows the government to obtain inside information from companies based there for purported national security purposes, as CNBC has reported.

During Chew’s much-anticipated testimony before the House Energy and Commerce Committee, Rep. Bob Latta, R-Ohio, asked Chew if any ByteDance employee in China could currently access U.S. data.

“After Project Texas is finished, the reply isn’t any,” Chew said. “Today, there’s nonetheless some knowledge that we have to delete.”

Later in the hearing, in an exchange with Rep. Tim Walberg, R-Mich., Chew denied it shares U.S. data with the Chinese Communist Party, saying that TikTok is a “personal business” that, like many others, relies on a “international workforce.”

In response to a request for comment last week about a remark made in a Wall Street Journal article that TikTok represents a Chinese espionage operation, a TikTok spokesperson said in a statement there was “no reality” to the allegation.

The spokesperson added at the time that “Since October of 2022, all new U.S. person knowledge has been saved solely within the Oracle Cloud Environment, with protected knowledge totally out of attain of any international authorities. That knowledge is managed solely by U.S. Data Security—a TikTok subsidiary made up of Americans, led and positioned in America—whose sole focus is to guard U.S. nationwide safety pursuits by securing U.S. person knowledge and stopping exterior manipulation of our methods.”

TikTok said Thursday that Project Texas is already in action but there are many steps to reach its completion. That includes deleting data from TikTok’s servers in Singapore and Virginia, a process it began last week. The data on those servers is the kind that could theoretically still be accessed by China-based ByteDance employees for the time being.

Once that data is deleted, according to TikTok, those employees will no longer have access to U.S. user data from the app.

— CNBC’s Rohan Goswami contributed to this report.

Subscribe to CNBC on YouTube.

WATCH: TikTok CEO Shou Zi Chew: I don’t condone effort by former employees to access U.S. user data