A journalist recounts discovering that ByteDance surveilled her in 2022 after reporting on TikTok's staff troubles in London and wonders why she was targeted
Cristina Criddle / Financial Times :
Context & Ripple Effects
Cristina Criddle's account closes a loop that opened in December 2022, when ByteDance fired four employees for accessing data on US TikTok users — including reporters — while hunting the sources of a story. By February, sources told Semafor that the Internal Audit team responsible had broad investigative powers with little oversight, prompting ByteDance to promise a restructuring.
What is new here is the named victim: an FT journalist who covered TikTok's London staff troubles, now confirming she was personally surveilled in 2022 and still without an explanation for why she was targeted. That detail matters because later Financial Times reporting found ByteDance has since tightened Beijing's grip on TikTok — the opposite direction from decentralizing the kind of access that produced the spying.
First-order effects
- Criddle and the Financial Times gain direct evidence that ByteDance monitored a working journalist's activity, converting an abstract data-governance scandal into a named press-freedom case against the company.
- ByteDance's promised Internal Audit restructuring comes under immediate question: the surveillance predates the firings and the restructuring pledge, so the company must show the fix addressed the team's unchecked powers, not just its personnel.
Second-order effects
- Western regulators and lawmakers scrutinizing TikTok's China links acquire a concrete, journalistic example to cite when arguing that ByteDance-level control of TikTok data carries risks beyond consumer privacy.
- Other newsrooms covering ByteDance and TikTok face forced operational choices — how they use the app, what devices they report from, and how they protect source confidentiality — because one outlet has documented being watched.
Third-order effects
- If surveillance incidents keep surfacing despite firings and restructurings, the durable outcome is that ByteDance's internal data-access culture gets treated as a standing regulatory concern rather than a one-off misconduct story, hardening the assumption among policymakers and journalists that the two companies' data practices are inseparable.
The trend: ByteDance's internal data-access practices have become a recurring flashpoint in Western scrutiny of TikTok, with each new revelation outlasting the company's cleanup pledges.