The Finnish Security and Intelligence Service (Supo) says it's possible that the Chinese authorities can view users' data on Tiktok, a short-form video social media platform.
Supo told Yle that Chinese law requires Chinese companies and individuals to assist the country's intelligence authorities if necessary. This means Chinese intelligence can gain access to Tiktok user data, regardless of the views or wishes of the platform's parent company, Bytedance.
According to Supo, Tiktok collects an exceptionally large amount of information from mobile devices and their users.
"We're not weighing in on the likelihood that Finnish users' data is ending up with Chinese intelligence, but we want to emphasise that it is possible," Supo said.
Like some other large organisations in Finland, the agency has prohibited its employees from installing Tiktok on their work phones, while also recommending that they don't use the app on their personal devices either.
Supo's comments follow on recent concerns raised by MPs including Aura Salla (NCP), a former lobbyist for Meta, who has called for the EU to ban the social media app for security reasons.
Supo has recommended that politicians and authorities not download the app on phones used for conducting official business, or devices containing any sensitive information, for that matter.
Would you like a roundup of the week's top stories in your inbox every Thursday? Then sign up to receive our weekly email.
The agency said it had not seen any evidence suggesting that the platform's content in the west was designed to positively influence users' views on China.
"There is a risk of influence, but it is unlikely that China would exploit it in the short term against Finland," Supo said, but added that Tiktok's algorithm was particularly addictive compared to other social media platforms.
"Tiktok's algorithm shows users content it believes they are interested in, even when that content is harmful, such as related to self-harm or eating disorders."
While Tiktok collects an remarkable amount of user data and comes from an authoritarian state that does not adhere to western fundamental rights, Supo said it's not in favour of restricting the app through legal means, noting that social media apps come and go.
"Better results are likely achieved by reminding users of cybersecurity risks and the risks associated with sharing their information."
Users with an Yle ID can leave comments on our news stories. You can create your Yle ID via this link. Our guidelines on commenting and moderation are explained here.