The Chinese Communist Party (CCP): A Quest for Data Control

The CIS MS-ISAC CTI team assesses that PRC-owned apps such as TikTok, Temu, Shein, CapCut, Lemon8, and NewsBreak pose elevated risks due to Chinese laws enabling state access to company-held data and the CCP’s use of platforms for malign influence, including potential algorithmic manipulation and coordinated inauthentic behavior. The report outlines ownership and regulatory ties (e.g., ByteDance, PDD Holdings, PRC data/intelligence laws), cites allegations and lawsuits (e.g., Pinduoduo malware, CapCut privacy claims, Shein/Zoetop breach), and highlights the large user scale that could enable broad data harvesting and influence. It recommends reviewing app privacy policies, performing risk assessments (including third-party/CCP access risks), and enforcing acceptable use policies for organizational devices.