FAR 52.204-27

FAR 52.204-27 — Prohibition on a ByteDance Covered Application — US Federal Acquisition Regulatory Council

Also known as: FAR 52.204-27, 52.204-27, ByteDance covered application, TikTok ban clause

At a glance

Current version
FAR 52.204-27 (JUN 2023)
Published 2 June 2023. source
Status
In force
Next deadline
None announced
Who must comply
Federal contractors and all their subcontractors: no TikTok or other ByteDance covered application on Government IT or on IT used or provided under the contract, including employees' own equipment. source
Written by
The FAR Council (DoD, GSA and NASA) issued the clause by interim rule to implement the No TikTok on Government Devices Act (Pub. L. 117-328, Division R, section 102) and OMB Memorandum M-23-13. source source
Last change

Bars TikTok and any other ByteDance covered application from devices used to perform a federal contract, including personal devices where contract work is done, and requires the prohibition to flow down to subcontractors. It is the narrowest of the three FAR cyber clauses.

Recent changes

Nothing changed in the last 90 days. Sign in to read further back.

Key dates

No upcoming dates
  1. Comment period closed on the FAR Overhaul proposed rule that would fold the clause into 52.240-3
  2. FAR Overhaul model deviation text for Part 40 issued; agencies adopting it apply the TikTok/ByteDance prohibition through clause 52.240-91
  3. FAR 52.204-27 takes effect

Version history

  1. FAR Overhaul proposed rule (Parts 1, 2, 4, 33, 39, 40, 53) Draft

    Proposes transferring the clause into 52.240-3, Security Prohibitions and Exclusions; comments closed on 23 July 2026. source

  2. FAR 52.204-27 (JUN 2023) Major versionCurrent

    Interim rule creating the clause, effective 2 June 2023. source

Who it applies to

The clause bans a ByteDance covered application from any IT used for a federal contract, including employee-provided devices.

Covered application
The social networking service TikTok, or any successor application or service developed or provided by ByteDance Limited or an entity it owns. source
Devices
Government-owned or managed IT and any IT used or provided by the contractor under the contract, including equipment provided by the contractor's employees. source
Exception
The prohibition does not apply where the contracting officer gives written notice that an exception has been granted. source
Subcontracts
The substance of the clause goes into all subcontracts, including for commercial products and services. source
FAR Overhaul
Under the FAR Overhaul Part 40 deviation text, the TikTok/ByteDance prohibition sits in 52.240-91, Security Prohibitions and Exclusions. source

How compliance is assessed

The contractor keeps covered applications off contract IT and flows the clause down.

Prohibition
The contractor is prohibited from having or using a covered application on the IT the clause covers. source

Enforcement and penalties

The clause is enforced as a contract term by the contracting agency.

Legal basis
The Act and OMB M-23-13 prohibit the presence or use of a covered application on executive agency IT, including certain equipment used by federal contractors. source

Documents

  1. Law text FAR 52.204-27 Prohibition on a ByteDance Covered Application
  2. Law text Interim rule creating the clause (2 June 2023)
  3. Guidance FAR Overhaul – Part 40, Information Security and Supply Chain Security (model deviation text)

Verified against official sources on 18 October 2026. We monitor the official sources for this framework. Watching since 20 September 2026. Subscribe to FAR 52.204-27 (RSS)