Australian Senator Tables Bill to Ban TikTok on Government Devices

The short-form video platform owned by Chinese internet company ByteDance is once again at the centre of Australian political debate, with a Senator introducing legislation that would prohibit the app from all federal government-issued devices. The bill arrives amid persistent warnings from intelligence agencies about foreign interference and data harvesting risks, and it seeks to convert existing administrative directives into binding law.

Lawmakers in Canberra have been scrutinising TikTok’s data collection practices for several years, particularly since revelations about how the platform handles user information. The proposed legislation would formalise a ban that has so far been implemented through departmental policy rather than statute, closing perceived loopholes and extending restrictions to a wider range of public sector workers, including contractors and parliamentary staff.

A Push to Codify Security Measures

The bill, tabled in the Senate, aims to make it a legislative requirement for the app to be removed from any device owned, leased, or operated by a Commonwealth entity. Proponents argue that relying on executive orders or agency-by-agency policies creates an inconsistent patchwork across the Australian Public Service. By embedding the prohibition in primary legislation, the measure would ensure uniformity across departments, regardless of changes in ministerial leadership or bureaucratic interpretation.

Senators supporting the bill point to the evolving nature of cyber threats and the need for statutory clarity. The text of the proposed law defines government devices broadly, covering laptops, mobile phones, and tablets used by departmental staff in offices from Sydney to Perth. It also includes work-from-home equipment and any device that connects to internal government networks, ensuring that employees cannot simply use personal hardware to circumvent the rules.

Cybersecurity and Foreign Interference Concerns

Intelligence and cybersecurity officials have repeatedly flagged TikTok as a potential vector for foreign intelligence gathering. The app collects granular location data, device identifiers, and browsing habits, which critics argue could be accessed by authorities in Beijing under national security laws. The Australian Signals Directorate has previously advised that the platform poses an unacceptable risk on devices handling sensitive information.

Australia’s intelligence community operates within the Five Eyes framework alongside the United States, the United Kingdom, Canada, and New Zealand, several of which have already imposed restrictions on the platform. Home Affairs officials have echoed warnings that the app’s backend architecture could be exploited for espionage, particularly targeting officials involved in trade negotiations, defence procurement, and diplomatic communications. The bill reflects these assessments by removing any ambiguity about the app’s status on official equipment.

Building on Existing Restrictions

In April 2023, the Albanese government directed all federal agencies to uninstall TikTok from work-issued phones and laptops, following similar moves by the European Commission and several US states. That directive, issued by the Department of Home Affairs, applied to entities covered by the Protective Security Policy Framework. It did not, however, cover devices used by elected officials themselves or by staff working for individual parliamentarians.

The new bill seeks to close that gap by explicitly including parliamentary offices, ministerial advisers, and the offices of the Governor-General within its scope. It would also mandate regular auditing of government networks to ensure compliance, with reporting requirements tabled in Parliament twice a year. Such provisions would give the Australian National Audit Office an expanded role in verifying that agencies are adhering to the ban.

Reactions from the Public Service and Tech Sector

Responses within the public service have been broadly supportive, though some agencies have raised practical concerns about implementation. IT departments in Melbourne and Brisbane have already invested significant resources in mobile device management solutions to enforce the existing directive, and additional statutory requirements could strain already limited cybersecurity budgets.

Technology industry groups have urged lawmakers to ensure the legislation is narrowly tailored and does not inadvertently capture other applications or services. Digital rights advocates, meanwhile, warn that the bill should include clear judicial oversight and avenues for appeal, particularly if future expansions target additional platforms. Balancing these concerns, the bill includes a sunset clause requiring parliamentary review every three years, allowing adjustments based on technological change and threat assessments.

Impact on Federal Employees and Communication Channels

For the more than 150,000 Australian Public Service employees, the bill would have minimal direct impact beyond formalising practices already in place. Most departmental staff in Canberra and regional offices have long been prohibited from installing TikTok on work devices, with compliance enforced through automated mobile application management tools.

The wider implications extend to how government agencies communicate with the Australian public. TikTok has become an increasingly important channel for reaching younger demographics, and several departments maintain official accounts for public health campaigns and emergency alerts. The bill does not prohibit agencies from maintaining official accounts operated from non-government devices, but it does require that any official content be approved through standard departmental communications protocols to prevent inadvertent security breaches.

Privacy Debates and Digital Sovereignty

Beyond immediate security concerns, the bill has reignited discussions about digital sovereignty and the regulatory treatment of foreign-owned technology platforms. Australia lacks a comprehensive framework for assessing the national security risks of specific applications, unlike the United States where the Committee on Foreign Investment has authority to review software transactions.

Some legal experts have suggested that the legislation could serve as a template for broader reforms, potentially leading to a dedicated digital security review regime. Others caution that piecemeal bans risk fragmenting the digital economy and pushing users toward less regulated platforms. The debate underscores a growing recognition that data governance is no longer a peripheral issue but a central pillar of national security policy in the digital age.

International Coordination and Regional Context

The proposed legislation aligns Australia with a growing number of jurisdictions restricting Chinese-owned applications on official equipment. Canada announced its own ban on TikTok for federal employees in early 2023, while the UK Parliament closed its official TikTok account following security advice from the National Cyber Security Centre. These coordinated moves reflect shared concerns within Western intelligence partnerships about the exposure of sensitive data to foreign adversaries.

In the Indo-Pacific region, New Zealand and India have taken similar precautionary steps, creating a broader pattern of regulatory alignment. Australian officials have consulted with regional partners on best practices for implementation, particularly regarding the technical challenges of blocking specific applications across diverse operating systems. The bill incorporates lessons learned from these international counterparts, establishing clear definitions and enforcement mechanisms that have proven effective elsewhere.

Steps for Agencies Preparing for Compliance

Public sector organisations should consider the following measures to align with the proposed requirements:

• Conduct a comprehensive audit of all mobile devices and laptops currently connected to government networks
• Update mobile device management policies to include explicit prohibitions on ByteDance-owned platforms
• Provide training for APS employees on the rationale behind the restrictions and acceptable use policies
• Establish clear procedures for reporting potential security incidents involving foreign applications
• Review contracts with external contractors to ensure their devices comply with the new standards
• Allocate budget for cybersecurity upgrades required to monitor and enforce compliance across distributed workforces

Federal agencies and their technology partners should begin preparing now for the legislative changes ahead. By engaging proactively with the proposed framework, departments can demonstrate their commitment to safeguarding national security while minimising disruption to essential services. Stakeholders across the Australian Public Service are encouraged to review their current practices and contribute to the parliamentary consultation process as the bill moves through committee review.