The United States closed 2022 by converting years of concern over TikTok's Chinese ownership into a government-wide legal prohibition. President Joe Biden signed the Consolidated Appropriations Act on December 29, and buried inside the measure was the No TikTok on Government Devices Act, requiring federal agencies to remove the social-media application from government information technology, subject to limited exceptions for law-enforcement, national-security and security-research purposes.

The statutory language appears in Public Law 117-328, the $1.7 trillion year-end spending package. The TikTok provision gives the Office of Management and Budget 60 days to develop standards for executive agencies, creating a government-wide baseline rather than leaving restrictions to individual departments. The action does not ban TikTok for private U.S. users, but it represents Washington's most concrete federal step yet against an application used by tens of millions of Americans.

A narrow ban built on a broad security debate

Congress's action followed a long-running dispute over whether TikTok's parent company, Beijing-based ByteDance, could be compelled under Chinese law to provide data or otherwise assist state authorities. TikTok has repeatedly said it does not provide U.S. user data to the Chinese government and has been working on a security architecture intended to isolate protected U.S. data. Lawmakers, however, have focused on whether China-based personnel can access U.S. information and whether ownership itself creates risks that technical safeguards cannot eliminate.

A December 14 Senate committee report accompanying the standalone No TikTok on Government Devices Act framed the policy as a protection for federal information systems. The Senate passed the measure unanimously that day, and sponsor Sen. Josh Hawley said in a statement after passage that agencies including the State Department, Homeland Security Department, Defense Department and Transportation Security Administration had already restricted the app on government devices.

The following day, Hawley used a Senate floor statement to argue that federal systems should not carry an application owned by a company subject to Chinese jurisdiction. His argument was part of a rare bipartisan convergence around a technology platform: lawmakers differed over whether broader regulation or even a nationwide ban might ultimately be justified, but there was little resistance to removing TikTok from official federal devices.

Congressional testimony sharpened the data-access question

The government-device ban did not emerge from a single incident. During a September 14 Senate Homeland Security and Governmental Affairs Committee hearing on social media, TikTok Chief Operating Officer Vanessa Pappas faced repeated questions about data access, platform governance and the relationship between U.S. operations and ByteDance personnel abroad. Members from both parties pressed the company on whether employees in China could reach data associated with American users.

Earlier in the year, a group of senators led by Roger Wicker sent TikTok a June 29 letter seeking answers after reports that China-based engineers had repeatedly accessed U.S. user information. The senators contrasted those reports with prior assurances that U.S. user data was stored in the United States and Singapore and that access was controlled by a U.S.-based security team.

The issue intensified in October when Forbes reported that a China-based ByteDance internal-audit team had planned to use TikTok data to monitor the physical location of specific American citizens. TikTok disputed the characterization of the report and said the app does not collect precise GPS information from U.S. users. But the disclosure added momentum to lawmakers who viewed the problem as one of governance and access rather than simply where servers were located.

The law stops short of a civilian prohibition

The new statute is deliberately narrower than some proposals under discussion in Washington. It applies to federal information technology, not to personal phones owned by federal workers and not to the general public. Agencies will also be able to authorize limited use for law enforcement, national-security activities or security research. That structure reflects Congress's immediate concern: reducing the possibility that an application controlled by ByteDance is present on devices that may contain government information or connect to federal systems.

For TikTok, the restriction complicates an already difficult negotiation with the Committee on Foreign Investment in the United States. The company has been developing a restructuring effort often described as Project Texas, centered on storing protected U.S. user data in Oracle infrastructure and placing additional controls around access. The federal-device law does not resolve that CFIUS process. Instead, it establishes a statutory minimum even if negotiations continue.

The action also follows a wave of state-level restrictions. Republican and Democratic officials in a growing number of states have ordered TikTok off state-owned devices, citing similar security concerns. The federal law therefore standardizes an approach that had already become common in public-sector technology management.

A technology-policy line hardens

The significance of the December law extends beyond whether federal employees can scroll TikTok on a work phone. Congress has now written ByteDance by name into federal cybersecurity policy, demonstrating a willingness to treat ownership by a company based in a strategic competitor as a distinct technology risk. That is a meaningful escalation from hearings, letters and voluntary agency restrictions.

Whether lawmakers move next toward broader limits remains uncertain. TikTok remains one of the country's most popular consumer applications, and a nationwide prohibition would raise substantially larger legal, economic and free-expression questions. For now, Washington has chosen a narrower target with unusually broad political support: federal devices themselves. The debate over TikTok's future in the United States is far from over, but the end of 2022 marks the point at which the federal government's concern became binding law.