TikTok divestiture law (2024-2026): the April 2024 PAFACAA, the Supreme Court’s January 2025 affirmation, and the January 2026 TikTok USDS divestiture closing

How the law was passed

PAFACAA had been in development through 2023-2024 with bipartisan congressional support based on national-security concerns. The principal concerns were: ByteDance’s headquarters in China and its legal obligation under Chinese law to comply with Chinese-government data requests; TikTok’s extensive data collection from US users (location, contacts, viewing patterns, behavior data); the potential for ByteDance to use TikTok for influence-operation purposes (algorithm tuning to promote or suppress specific content categories or political viewpoints); and the strategic implications of the Chinese government having direct or indirect access to data on more than half of the US population.

The legislative process accelerated through early 2024. The House passed the bill in March 2024 with broad bipartisan majority (352-65). The Senate passed an amended version in April 2024. President Biden signed PAFACAA on April 24, 2024. The law set January 19, 2025 as the divestiture deadline; if ByteDance did not divest TikTok’s US operations by that date, the law prohibited US app stores (Apple App Store, Google Play) and US hosting providers from supporting TikTok, effectively producing a US ban.

The legal challenge and the Supreme Court affirmation

TikTok and ByteDance challenged PAFACAA in federal court alleging that the law violated the First Amendment by restricting speech-platform operations based on the speakers’ foreign-government affiliation. The legal arguments emphasized: TikTok content is constitutionally-protected speech; the law’s effect on TikTok would silence 170 million US users; less-restrictive alternatives (data-security agreements, transparency requirements) should have been preferred over forced divestiture; the law was effectively a bill of attainder targeting a specific company.

The D.C. Circuit Court of Appeals upheld the law on December 6, 2024. The court found that the national-security rationale was substantial, that the divestiture-not-content-restriction structure of the law avoided direct First Amendment violation, and that the deference courts owe to congressional national-security determinations supported the law’s constitutionality. The Supreme Court took up TikTok’s appeal on an expedited basis and ruled on January 17, 2025, affirming the D.C. Circuit. The Supreme Court’s opinion emphasized the national-security rationale and the foreign-adversary-controlled-application framework of the law. The legal challenge was effectively exhausted.

The post-Supreme-Court period and the TikTok USDS divestiture

After the Supreme Court ruling TikTok briefly went offline in the US on January 19, 2025 (when the law’s app-store-prohibition took effect). The Trump administration (which had taken office January 20, 2025) immediately announced multiple executive orders extending TikTok’s operational period during continued divestiture negotiations. The legal mechanism for these extensions has been contested but TikTok continued to operate in the US through 2025 under the executive-order framework.

Through 2025 multiple potential acquirers were reported to be considering TikTok’s US operations: Oracle (which had been TikTok’s US data-hosting partner), Microsoft (which had pursued a TikTok-US-acquisition in 2020 before being declined), various private-equity-led consortia, and one or more US-investor-led groups. The final divestiture structure (TikTok USDS) closed on January 22, 2026: TikTok’s US operations divested into a newly-incorporated US-based entity with US-investor ownership control, ending the period of the de jure ban. The post-divestiture operational details — specific ownership stakes, ByteDance’s residual involvement, the algorithm-and-source-code arrangements, the data-handling structure — continue to develop through 2026.

How RGM thinks about national-security regulation of technology platforms

When clients in technology, cross-border platform, or related categories ask about how to think about national-security regulation, the TikTok case is the structural example. Three structural lessons. First, foreign-government-controlled technology platforms face structural divestiture-or-ban risk in major Western jurisdictions when national-security concerns rise. The Chinese-Western technology relationship has been deteriorating through 2018-2025; the TikTok divestiture is the most prominent but not the only manifestation. Companies in similar structural positions (foreign-government-headquartered technology platforms operating in Western markets) should plan for the regulatory risk as a real and material business factor. Second, the legal-and-political process for forced divestiture works through national-security frameworks rather than antitrust frameworks. The First Amendment defense that TikTok pursued was ultimately rejected because the law was structured as national-security regulation rather than as content-restriction. Companies considering legal challenges to similar laws should evaluate the legal-framework characterization carefully. Third, the divestiture-execution process can be substantially longer and more complex than the law’s initial deadline suggests. PAFACAA’s January 2025 deadline was extended through 2025 by executive action; the actual divestiture completion in January 2026 was a year past the original deadline. The political-and-business complexity of executing a $30-50+ billion divestiture of a strategically-important platform produces delays even when the legal framework is settled.

The pattern is generalizable to other foreign-government-headquartered technology platforms with US (or major-Western-market) user bases. The structural conditions for divestiture-or-ban risk: foreign-government-headquartered ownership, substantial US/Western user base, perceived national-security relevance of the platform’s data or operations, and deteriorating geopolitical context between the home country and the Western market. Multiple Chinese-headquartered platforms (other ByteDance products, Tencent products, Alibaba products) face varying degrees of similar structural risk. We tell clients in adjacent categories to evaluate their regulatory-exposure-risk against these conditions.

Frequently asked questions

Related