Nearly four months after TikTok’s Chinese parent company ByteDance finalized a deal to transfer control of American user data to a newly formed US joint venture called TikTok USDS, Senator Ed Markey is now demanding answers. The Democratic senator from Massachusetts sent formal letters to both the joint venture and Oracle on Friday, pressing them to explain exactly how they are protecting the personal information of more than 200 million Americans who use the app. His questions also target whether foreign entities could still secretly influence which videos American users see in their feeds. The move signals that Washington’s scrutiny over TikTok is far from over, even after a deal that was meant to avoid a government ban.
Markey’s letters arrive at a time when lawmakers and the public remain largely in the dark about the inner workings of the divestment arrangement. The senator did not hold back in his assessment, stating, “The divestment deal has left the Congress and the American people rightfully wondering whether President Trump’s TikTok deal is a national security risk.” Those words carry weight because they reflect a growing bipartisan unease. While President Donald Trump chose not to enforce a 2024 law that would have forced ByteDance to sell its US assets by January or face a ban, the Supreme Court had already upheld that measure as constitutional. The president’s decision not to act left the deal in a strange half state, approved in practice but not fully vetted by Congress.
Oracle’s role in this arrangement is central to understanding the potential risks. The cloud computing giant is one of three managing investors in the TikTok USDS joint venture. Under the terms announced in January, the venture will retrain, test, and update TikTok’s content recommendation algorithm specifically on US user data. That algorithm, which determines what videos rise to the top of millions of feeds, will then be secured inside Oracle’s US based cloud infrastructure. On paper, that sounds like a clean separation from ByteDance’s control. But in reality, technology transfers and algorithm governance are notoriously difficult to wall off completely. Engineers, code dependencies, and training data can blur lines in ways that are not always visible to outside auditors.
What makes this situation even more delicate is the complete silence from key players. TikTok USDS, Oracle, and the White House all did not immediately respond to requests for comment. That lack of communication is precisely what frustrates lawmakers like Markey. Congress has not held any hearings on the transaction yet, and the details that have emerged remain frustratingly vague. For instance, who exactly manages the encryption keys for user data stored in Oracle’s cloud? What legal mechanisms prevent ByteDance engineers in Beijing from remotely accessing logs or metadata? How often will independent security audits be performed, and who gets to see the results? These are not academic questions. They go to the heart of whether the joint venture is a genuine solution or just a rebranding of the same risks.
From a lived experience perspective, anyone who has followed the TikTok saga over the last few years knows how exhausting it has been. Users have seen warning labels, heard about potential bans, watched their favorite creators prepare to migrate to other platforms, and then witnessed last minute reprieves. There is a real fatigue around the idea that a social media app could be a national security threat while also being a source of community, entertainment, and income for millions. One lesson that has emerged from this long running debate is that technical solutions like data localization and joint ventures sound reassuring in press releases but rarely satisfy the deeper political and public demand for transparency.
Looking at the expertise angle, the core issue here is not just where data is stored but how recommendation algorithms are governed. ByteDance has long argued that its algorithm is proprietary and impossible to replicate or transfer fully. That creates a paradox. If the algorithm remains uniquely tied to ByteDance’s Chinese engineering team for updates and improvements, then the US joint venture is essentially running a copy without full control. If the algorithm is truly retrained and secured in Oracle’s cloud without ongoing Chinese input, then the TikTok product might degrade in quality, losing the very feature that made it addictive and effective. Neither outcome is ideal.
The authority of Senator Markey’s inquiry comes from his long standing role on subcommittees dealing with privacy and technology. He is not a newcomer to data security fights. He has previously pressed Amazon, Google, and Facebook on similar issues, which means his letters to Oracle and TikTok USDS are likely to be followed by more formal requests, possibly even subpoenas, if answers are not forthcoming. The fact that he chose to send these letters publicly, not just through private channels, signals that he wants the American people to watch this process closely.
Trustworthiness in this situation requires admitting that no perfect solution exists. On one hand, the joint venture structure is a creative attempt to comply with US legal demands while keeping TikTok operational. It avoids the harsh disruption of a full ban, which would have hurt creators, small businesses, and everyday users who rely on the platform for news and connection. On the other hand, the lack of congressional hearings and the administration’s refusal to enforce the 2024 law leaves a lingering suspicion that the deal was rushed to avoid political embarrassment rather than thoroughly protect national security. The unanswered questions about foreign influence over video recommendations are especially troubling because TikTok’s algorithm has undeniable power to shape public opinion, trends, and even political discourse among young Americans.
