legalwin.org

HR 5692: Everything You Need to Know About the Foreign Adversary Controlled Applications Act

From scrolling social media to managing personal finances, smartphone apps are woven into the fabric of daily life for millions of Americans. But this convenience carries hidden risks: apps controlled by foreign adversaries can harvest sensitive user data, manipulate content, or even threaten critical national infrastructure. To address these growing concerns, the U.S. House of Representatives introduced the Foreign Adversary Controlled Applications Act—a bipartisan bill designed to mitigate national security threats posed by such apps.

In this blog, we'll break down the key components of the Foreign Adversary Controlled Applications Act, its impact on users, businesses, and developers, criticisms surrounding the legislation, and what has happened since the law was enacted.

Table of Contents#

  1. What Is the Foreign Adversary Controlled Applications Act? An Overview
  2. Key Provisions of the Foreign Adversary Controlled Applications Act
    • Identification of High-Risk Apps
    • Restrictions on Distribution and Use
    • Due Process for App Developers
  3. Defining "Foreign Adversary Controlled Applications"
  4. Enforcement Mechanisms and Penalties
  5. Potential Impact: Users, Businesses, and Developers
  6. Criticisms and Controversies
  7. What Happened Next: From Law to TikTok Divestiture
  8. Conclusion
  9. References

1. What Is the Foreign Adversary Controlled Applications Act? An Overview#

The Foreign Adversary Controlled Applications Act (H.R. 7521) is a bipartisan piece of legislation introduced on March 5, 2024, by Representatives Mike Gallagher (R-WI) and Raja Krishnamoorthi (D-IL). Its core purpose is to grant the U.S. government authority to regulate or ban apps that are controlled by foreign adversaries and pose an unacceptable risk to national security. The law was signed by President Biden on April 24, 2024.

The bill responds to longstanding concerns about apps like TikTok (owned by China-based ByteDance), which critics argue could be compelled by foreign governments to share user data or spread disinformation. Unlike previous attempts to ban specific apps, the Foreign Adversary Controlled Applications Act creates a broader, systematic framework for identifying and addressing risks from any foreign-controlled app. The law explicitly targets ByteDance Ltd. and its subsidiaries, including TikTok.

2. Key Provisions of the Foreign Adversary Controlled Applications Act#

The bill outlines three primary pillars of action to mitigate national security risks:

2.1 Identification of High-Risk Apps#

The Secretary of Commerce, in consultation with the Attorney General, Secretary of Homeland Security, Director of National Intelligence, and other relevant agencies, will:

  • Develop criteria to identify "Foreign Adversary Controlled Applications (FACAs)" that pose a threat to U.S. national security.
  • Maintain a public, updated list of these high-risk apps.
  • Conduct regular reviews to assess new apps or changes to existing ones that may alter their risk profile.

2.2 Restrictions on Distribution and Use#

For apps listed as FACAs, the Secretary of Commerce has the authority to issue rules to:

  • Prohibit or restrict distribution through app stores, internet platforms, or other digital marketplaces.
  • Ban users from downloading, installing, or using the app on U.S.-based devices.
  • Require the removal of the app from existing devices.
  • Prohibit transactions related to the app, such as in-app purchases or advertising partnerships.

2.3 Due Process for App Developers#

The bill includes safeguards to prevent arbitrary action against developers:

  • App developers have the right to appeal their inclusion on the FACA list through an administrative process.
  • If dissatisfied with the administrative decision, developers can seek judicial review in federal court.
  • The Secretary must provide clear, written justification for listing an app, including evidence of foreign control and national security risk.

3. Defining "Foreign Adversary Controlled Applications"#

The law defines a FACA as an application that is controlled by a foreign adversary, specifically targeting ByteDance Ltd. and its subsidiaries, including TikTok. The definition also applies to any application that poses a national security threat due to foreign adversary control.

For example, TikTok qualifies as a FACA under this definition, given its ownership by ByteDance and its collection of extensive user data.

4. Enforcement Mechanisms and Penalties#

To ensure compliance, the law establishes strict penalties for violations:

  • Civil Penalties: Up to $1 million per violation, or twice the gross gain or loss resulting from the violation (whichever is higher).
  • Criminal Penalties: For intentional violations, individuals or entities may face fines up to $5 million and imprisonment for up to 10 years.
  • Cease-and-Desist Orders: The Secretary of Commerce can issue immediate orders to stop distributing or using a FACA, with penalties for non-compliance.

5. Potential Impact: Users, Businesses, and Developers#

The law has had far-reaching effects across the tech ecosystem:

5.1 Impact on Users#

  • Data Protection: The law has reduced the risk of sensitive user data being shared with foreign governments, enhancing privacy and security.
  • TikTok Divestiture: Users retained access to TikTok after ByteDance divested to a majority American-owned joint venture.
  • Increased Transparency: Users are now aware of the national security risks associated with foreign-controlled apps.

5.2 Impact on Businesses#

  • App Stores: Apple, Google, and other app store operators were required to remove TikTok temporarily during the January 2025 shutdown, though the app returned after the divestiture deal.
  • Tech Companies: U.S. firms that partnered with ByteDance had to navigate the divestiture process and establish new relationships with the American-owned entity.
  • Small Businesses: Companies that relied on TikTok for marketing faced uncertainty during the divestiture period but regained access after the deal closed.

5.3 Impact on Developers#

  • ByteDance: The company divested its U.S. TikTok operations to a new joint venture, retaining only a 19.9% stake.
  • Other Foreign Developers: Developers based in adversary countries face increased scrutiny and potential restrictions on U.S. market access.
  • U.S. Developers: Domestic developers have benefited from the precedent set by the law, which establishes clear rules for foreign-controlled applications.

6. Criticisms and Controversies#

While the Foreign Adversary Controlled Applications Act has bipartisan support, it has sparked debate:

  • Government Overreach: Critics argue the bill gives the Secretary of Commerce excessive authority to ban apps without clear, narrow guidelines, potentially stifling innovation and free speech.
  • Unintended Consequences: Small developers or apps with minor foreign ties may be unfairly targeted, harming global tech collaboration.
  • Geopolitical Tensions: The bill could escalate tensions with countries like China, which may retaliate by banning U.S. apps (e.g., Facebook, Instagram) in its domestic market.
  • User Privacy Concerns: Some worry that the government’s monitoring of app data could lead to increased surveillance of U.S. users.

7. What Happened Next: From Law to TikTok Divestiture#

The Foreign Adversary Controlled Applications Act was signed into law by President Biden on April 24, 2024, as part of a national security supplemental package. Here is what followed:

  1. Legal Challenge: TikTok filed a federal lawsuit on May 7, 2024, challenging the constitutionality of the law.
  2. Supreme Court Ruling: On January 17, 2025, the U.S. Supreme Court unanimously upheld the law, rejecting TikTok's First Amendment challenge.
  3. Brief Shutdown: TikTok briefly shut down on January 19, 2025, the deadline for ByteDance to divest.
  4. Enforcement Delays: President Donald Trump issued multiple executive orders delaying enforcement—initially for 75 days, then extending deadlines through September and December 2025.
  5. Divestiture Deal: On January 22, 2026, TikTok finalized a deal to create TikTok USDS Joint Venture LLC, a majority American-owned entity. ByteDance retained a 19.9% stake in the new joint venture.

Conclusion#

The Foreign Adversary Controlled Applications Act represents a significant step toward addressing national security risks posed by foreign-controlled apps. The law has already led to TikTok's divestiture from ByteDance, with a new American-owned joint venture taking over U.S. operations. While the law has achieved its core objective of reducing foreign adversary control over popular apps, it also raises important questions about government overreach, innovation, and geopolitical relations. The TikTok precedent may shape how the U.S. approaches foreign-controlled technology in the years to come.

References#

  1. Congress.gov. (2024). H.R.7521 - Protecting Americans from Foreign Adversary Controlled Applications Act. Retrieved from https://www.congress.gov/bill/118th-congress/house-bill/7521
  2. Wikipedia. (2025). Protecting Americans from Foreign Adversary Controlled Applications Act. Retrieved from https://en.wikipedia.org/wiki/Protecting_Americans_from_Foreign_Adversary_Controlled_Applications_Act
  3. U.S. Supreme Court. (2025, January 17). TikTok Inc. v. Garland. Retrieved from https://www.supremecourt.gov/opinions/24pdf/24-656_ca7d.pdf
  4. Reuters. (2026, January 23). TikTok seals deal for new US joint venture to avoid American ban. Retrieved from https://www.reuters.com/world/china/tiktok-reaches-deal-new-us-joint-venture-avoid-american-ban-2026-01-23/
2026-06

Legalwin Team

Welcome to Legalwin, where our team of dedicated professionals brings clarity to the complexities of the law.

Legal Disclaimer

No content on this website should be considered legal advice, as legal guidance must be tailored to the unique circumstances of each case. You should not act on any information provided by Legalwin without first consulting a professional attorney who is licensed or authorized to practice in your jurisdiction. Legalwin assumes no responsibility for any individual who relies on the information found on or received through this site and disclaims all liability regarding such information.

Although we strive to keep the information on this site up-to-date, the owners and contributors of this site make no representations, promises, or guarantees about the accuracy, completeness, or adequacy of the information contained on or linked to from this site.