OMB Rescinds TikTok Ban on Federal Government Devices

The U.S. Office of Management and Budget issued memo M-26-17 on August 11, 2026, formally rescinding the 2022 ban on TikTok across government-issued devices. The memo, titled "Rescission of M-23-13," reverses a directive that had prohibited federal employees from downloading or using the app on official hardware since late 2022. The Hill Bloomberg
The rescission rests on a Justice Department legal opinion, released July 17, 2026, which concluded that the 2022 statute no longer applies to the current version of TikTok. According to the OMB memo, the app is now under American ownership and operates on a different recommendation algorithm than the version controlled by ByteDance that prompted the original prohibition. Reuters Engadget
The U.S. version of TikTok is now operated by an entity called TikTok USDS Joint Venture. The controlling investor group includes Oracle and Silver Lake, while ByteDance retains a 19.9 percent minority stake. This ownership structure is the product of a divestiture deal whose execution led the President to determine, on March 6, 2026, that the general ban on TikTok under the Protecting Americans from Foreign Adversary Controlled Applications Act would no longer apply. Engadget DOJ OLC
The path to this point was neither quick nor linear. The Act's prohibitions on the affected entities took effect on January 19, 2025. In September 2025, President Donald J. Trump signed an executive order titled "Saving TikTok While Protecting National Security," which extended enforcement delays that had been in place since June 2025 under Executive Order 14310. That order was itself further extended until December 16, 2025, buying time for the divestiture negotiations to conclude. The DOJ memo issued in July 2026 confirmed that ByteDance's divestiture had met the statutory conditions for lifting the restrictions. White House Fox News
The original 2022 ban, codified in OMB memo M-23-13, was driven by concerns about ByteDance's ties to China and the potential for the app's data collection and recommendation algorithm to serve as instruments of foreign influence or espionage. Those concerns led to parallel restrictions across multiple federal agencies and several state governments. The Trump administration has now determined that the ownership transfer eliminates the national security threat that motivated those restrictions. Washington Examiner Bloomberg
The DOJ opinion's reasoning hinges on a material distinction: the app running on U.S. government devices today is not the same software product that Congress targeted in 2022. The recommendation engine driving the For You feed is, per the memo, architecturally distinct from the algorithm that operated under ByteDance's full control. Combined with the ownership shift to a U.S.-controlled joint venture, DOJ concluded the statutory conditions were no longer met. Engadget
Worth flagging is what the memo does not address. The rescission of M-23-13 lifts the federal device ban at the OMB level, but the memo does not speak to the patchwork of state-level prohibitions that remain on the books, nor to independent agency policies that may have been adopted separately from the OMB directive. Federal CIOs will need to determine whether their own internal policies auto-update to reflect the OMB rescission or require separate administrative action.
There is also the question of what "a different recommendation algorithm" means in practice. The DOJ opinion and OMB memo assert that the current algorithm differs from the one operated under ByteDance, but neither document provides technical detail on the nature of that difference. Whether the U.S. joint venture operates a fully independent recommendation stack, a forked version of ByteDance's original system, or a hybrid is not specified in the public materials. For federal CISOs evaluating whether to actually permit installation on sensitive networks, that distinction matters considerably.
The broader arc here is familiar to anyone who tracked the Committee on Foreign Investment in the United States (CFIUS) negotiations that consumed the first Trump administration's handling of TikTok in 2020. The proposed Oracle-led deal at that time failed to close, and the app continued operating under ByteDance control. The current TikTok USDS Joint Venture structure, with Oracle again in a central role, represents the completion of a divestiture framework that was five years in the making. The difference now is that a formal DOJ opinion has concluded the structural changes are sufficient to satisfy the statute.
For federal agencies, the practical effect is immediate: IT departments that had blocked TikTok at the device or network level pursuant to M-23-13 now have the green light to remove those restrictions. Whether they do so quickly is another matter. Agency-level risk assessments, mobile device management policy updates, and potentially procurement reviews of the new joint venture's data handling practices will shape the actual pace of adoption.
The rescission closes one chapter of the TikTok saga but does not end the regulatory scrutiny. ByteDance's retained 19.9 percent stake means the company is not fully absent from the U.S. entity's cap table, and the long-term stability of the arrangement will depend on whether the joint venture's governance structure holds under operational pressure. For now, the federal government's position is that the deal has done what it was designed to do: move control of a widely used consumer app into American hands, and let the algorithm follow.


