Yes, the FAR clause's mechanism still applies to whatever qualifies as a "covered application" today — but as of July 2026, TikTok itself may no longer be one. FAR 52.204-27, implementing the No TikTok on Government Devices Act (Consolidated Appropriations Act, 2023, Div. R, § 102) and OMB Memorandum M-23-13, extends the prohibition on a covered ByteDance application to information technology used or provided by a contractor under a covered contract, "including equipment provided by the Contractor's employees (e.g., employee-owned devices that are used as part of an employer bring your own device (BYOD) program)." That mechanism is unchanged: a personal device is swept in the moment it's used in contract performance, regardless of ownership. What has changed is whether TikTok, as currently operated, still meets the Act's definition of a covered application — see below.
What triggers the obligation
The operative trigger is use in contract performance, not device ownership. Once a BYOD device is used to perform work under a contract carrying the FAR 52.204-27 clause, the device becomes subject to the same prohibition on a covered application that applies to government- or contractor-owned equipment. The clause's text explicitly names employee-owned BYOD devices as within scope when so used, closing what might otherwise be read as an ownership-based loophole.
Where the boundary is less clear
The FAR clause does not itself define, with precision, which specific activities constitute "performance" of a contract for a personal device that is used for both personal and work purposes. Commentary from law firms tracking the rule has noted that a purely personal device not used at all for the contract appears to fall outside the prohibition, and that guidance distinguishing incidental use (e.g., searching for candidates without discussing covered work) from substantive contract-related use is limited. Organizations relying on BYOD for contract work should treat any ambiguity conservatively rather than assume incidental use is automatically exempt.
What changed: the July 2026 OLC opinion
On 16 July 2026, DOJ's Office of Legal Counsel issued 50 Op. O.L.C. __, Application of the No TikTok on Government Devices Act to the TikTok USDS Joint Venture, memorializing advice first given unconditionally on 10 March 2026. OLC concluded the Act reaches only applications developed or provided by entities in which ByteDance Limited holds a controlling ownership stake — not any stake at all. The TikTok USDS Joint Venture, established 22 January 2026 with American and allied investors holding 80.1% and ByteDance retaining 19.9%, falls outside that definition on OLC's reading.
OLC never addressed FAR 52.204-27 itself — contractors, BYOD, and personal devices are outside the opinion's scope. The FAR clause's "covered application" definition tracks the same statutory language OLC construed, so the reasoning likely carries over, but the clause hasn't been amended and remains in existing contracts as written. Agencies retain full discretion to prohibit TikTok on their own systems for independent reasons.
Enforcement and compliance history
This is not a purely theoretical question: the Treasury Inspector General for Tax Administration found that thousands of IRS-connected mobile devices, including some under the IRS's BYOD program, retained TikTok access well after the OMB-guidance deadline, illustrating that the BYOD-inclusion language has real compliance consequences for agencies and, by extension, government contractors relying on personal devices. This finding predates the OLC opinion and reflects a period when TikTok's ownership structure was different — it's evidence of enforcement gaps generally, not evidence about TikTok's current status under the Act.
This entry restates publicly available technical and policy sources and asserts nothing beyond them. It is not legal or compliance advice. BYODPolicy.org is not affiliated with, endorsed by, or accredited by NIAP, NIAP-CCEVS, or any government body.