TikTok is under the spotlight in Australia amid allegations of privacy breaches and personal data being collected.

Key points:

· Chinese-owned social platform TikTok has been accused of taking data from the devices of people who don't even have its app

· The Australian Information Commissioner is inquiring into the company's use of personal data, and deciding whether a full investigation is needed

· TikTok denies wrongdoing, and says the accusations against it are designed to "mislead or scare"

The Australian Information Commissioner is inquiring into the social media giant's handling of personal data, as well as claims it has been taking data without consent from people who do not have its mobile app.

Preliminary inquiries will determine whether a full investigation should be launched.

"Strong privacy protections are critical to addressing the privacy risks faced by Australians online," the commissioner said in a statement on Thursday, confirming inquiries were being made.

The allegations relate to the use of a tool known as a tracking pixel to harvest data including internet history and personal information, even from people who don't have the social media app installed.

TikTok denies breaching privacy laws, saying tracking pixels are used industry-wide and are voluntary for advertising clients to use.

It branded the accusations as an attempt to "mislead or scare companies without regard to current law or the information available".

"Pixel usage, which is voluntary for our advertising clients to adopt, is an industry-wide tool used to improve the effectiveness of advertising services," TikTok said in a statement.

"Our use of this tool is compliant with all current Australian privacy laws and regulations and we dismiss any suggestion otherwise.

"We also rely on our advertising clients to only share data with us through the Pixel, if they have in turn provided their customers with the necessary information and obtained the necessary permissions."

Australia user data is encrypted and stored in "world-class data centres" in the US and Singapore, the company added.

 

Attorney-General Mark Dreyfus says extensive reforms are needed to protect Australians.(AAP: James Ross)

Attorney-general says TikTok should 'co-operate'

Australian Attorney-General Mark Dreyfus said TikTok should fully co-operate with the commissioner.

"My advice for TikTok would be to co-operate with the investigator in this matter," he told reporters in Melbourne on Thursday.

Amid concerns about data harvesting by TikTok's parent company ByteDance and its ties to the Chinese Communist Party, Australia has banned the app from government devices.

ffairs spokesman James Paterson welcomed inquiries into the "mass privacy breach".

"TikTok's practices of harvesting the private contact information, browsing history and shopping habits of Australian internet users, apparently without consent, is deeply concerning and highly likely to be unlawful," he said.

"Especially troubling is that the data of non-TikTok users is allegedly being collected as part of this scheme."

Such conduct was unacceptable for any company, but "particularly alarming given TikTok is beholden to the Chinese Communist Party and is required under China's intelligence laws to share information", he added.

Senator Paterson also called on the government to take further legislative action to protect Australians' data.

Legislation to reform the Privacy Act is expected in 2024.

Extensive reforms are needed to ensure protection against "the technological changes that we are all now having to confront", Mr Dreyfus said.