Protecting Americans from Foreign Adversary Controlled Applications Act

The Protecting Americans from Foreign Adversary Controlled Applications Act (PAFACA) is the first federal law to require divestiture of a specific social media platform based on foreign ownership. Enacted as part of a foreign aid package, the law requires Chinese-owned ByteDance to sell TikTok or face prohibition from US digital infrastructure, an application that Executive Order 14352 describes as used by roughly 170 million Americans.

Legal Background

Congressional Development: The legislation originated as H.R. 7521, introduced by Representatives Mike Gallagher (R-WI) and Raja Krishnamoorthi (D-IL) in March 2024. After passing the House with bipartisan support, the bill was modified and incorporated into a larger foreign aid package to expedite Senate passage.

National Security Rationale: Congress cited two primary concerns: preventing the Chinese government from accessing Americans’ personal data through TikTok, and limiting the ability of the Chinese government to influence, without disclosure, the content the platform’s recommendation algorithm shows to American users.

Legislative Process: The House initially passed the standalone bill 352-65 on March 13, 2024. The modified version, extending the divestiture timeline, passed as part of the foreign aid package on April 20, 2024, with Senate approval on April 23, 2024.

Key Provisions

The law establishes the following requirements and restrictions:

Forced Divestiture Requirement: ByteDance must divest TikTok within 270 days of enactment (with possible 90-day presidential extension), transferring control to a non-foreign adversary entity through a “qualified divestiture.”

App Store and Web Hosting Prohibition: The Act’s prohibition on distributing, maintaining, or updating the application through US app stores and internet hosting services took effect on January 19, 2025, absent a qualified divestiture. How that prohibition has actually been applied is set out under “Enforcement and Divestiture” below.

Foreign Adversary Definition: The law reaches applications controlled by a “foreign adversary country,” a term it defines by cross-reference to 10 U.S.C. 4872(d)(2), which lists North Korea, China, Russia, and Iran.

Qualified Divestiture Exception: Provides detailed requirements for acceptable divestiture, ensuring ByteDance and other foreign adversary entities lose operational control and data access.

Presidential Extension Authority: Allows the President to grant a one-time extension of not more than 90 days, upon certifying to Congress that a path to a qualified divestiture has been identified, that significant progress has been made, and that binding legal agreements to execute the divestiture are in place.

Impact on Digital Platforms

PAFACA introduced new regulatory mechanisms for addressing foreign-owned digital platforms:

• Platform-Specific Targeting: First federal law to target a specific social media platform by name, departing from technology-neutral regulatory approaches
• Ownership-Based Restrictions: Establishes foreign ownership as sufficient grounds for platform prohibition, regardless of content moderation practices
• Intermediary Enforcement: Places the compliance obligation on app stores and internet hosting services rather than on the application’s operator
• User Impact: Absent a qualified divestiture, the Act would restrict access to an application that Executive Order 14352 describes as used by roughly 170 million Americans
• Statutory Mechanism: Applies a divestiture-or-prohibition mechanism keyed to foreign ownership rather than to the content a service carries

Legal Challenges and Evolution

Constitutional Challenge: TikTok, ByteDance, and content creators challenged the law in federal court, arguing violations of First Amendment free speech rights and Fifth Amendment due process protections.

Supreme Court Decision: In TikTok Inc. v. Garland (January 17, 2025), the Supreme Court affirmed the D.C. Circuit in a per curiam opinion, holding that the challenged provisions, as applied to the petitioners, do not violate the First Amendment. No justice dissented; Justice Sotomayor filed an opinion concurring in part and in the judgment, and Justice Gorsuch filed an opinion concurring in the judgment.

First Amendment Analysis: The Court concluded that no more than intermediate scrutiny applied and that the Act satisfied that standard, resting on the government’s interest in preventing China from collecting the personal data of U.S. TikTok users. It expressly declined to decide the standard for statutes supported by both content-neutral and content-based justifications, and declined to decide whether the foreign-adversary-control rationale is content based. The opinion emphasized “the inherent narrowness of our holding,” noting that a law targeting any other speaker would require a distinct inquiry.

Due Process Claims: Lower courts rejected arguments that the law constituted a bill of attainder or violated due process, finding sufficient procedural protections and legitimate legislative purposes.

Enforcement and Divestiture

The Act’s prohibitions became effective on January 19, 2025, but they were not enforced as written during 2025, and TikTok remained available to US users. On January 20, 2025, Executive Order 14166 directed the Department of Justice to take no action to enforce the Act until April 5, 2025. Three further orders extended that direction: Executive Order 14258 (April 4, 2025) to June 19, 2025, Executive Order 14310 (June 19, 2025) to September 17, 2025, and Executive Order 14350 (September 16, 2025) to December 16, 2025. Each order also instructed the Department not to impose penalties for conduct occurring during or before the period it covered.

On September 25, 2025, Executive Order 14352 determined, after the interagency process the Act’s section 2(c) requires, that the divestiture outlined in a framework agreement would be a “qualified divestiture” once its implementation agreements were executed. Under that framework, TikTok’s US application would be operated by a newly established, US-based joint venture in which ByteDance and its affiliates would hold less than 20 percent. The order directed a further 120 days of non-enforcement to allow the transaction to close.

TikTok announced on January 23, 2026 that TikTok USDS Joint Venture LLC had been established. By the company’s own account, Oracle, Silver Lake, and MGX each hold 15 percent and ByteDance retains 19.9 percent; the announcement is a statement by a party to the transaction and the remaining ownership is not broken out here. The statute itself remains in force, and under section 2(c) a presidential determination that a qualified divestiture has occurred removes the Act’s prohibitions as to the divested applications.

Digital Politics Implications

The law affects digital political organizing and speech in several ways:

• Platform Dependency: Political movements and campaigns that relied on TikTok faced the prospect of losing access to a platform used by roughly 170 million Americans
• Content Neutrality Doctrine: As applied to these petitioners, the Court treated the Act’s restrictions as content neutral and subject to intermediate scrutiny, while stressing that the holding was narrow and tied to TikTok’s scale, data collection, and susceptibility to foreign adversary control
• National Security and Speech: The Court rested on the government’s data-collection interest alone, leaving open how courts should treat statutes that also rest on content-based justifications
• Regulatory Precedent: The Act’s divestiture-or-prohibition structure is available for use against other applications that meet its definitions, though the Supreme Court stressed “the inherent narrowness of our holding” and did not say how its reasoning would apply to a different speaker

The Supreme Court held that the Act’s challenged provisions, as applied to these petitioners, do not violate the First Amendment, resting on the government’s interest in preventing China from collecting the personal data of US TikTok users. It emphasized “the inherent narrowness of our holding” and did not address how its reasoning would apply to any other speaker or statute.