Trump Signed Five Orders Not to Enforce the TikTok Law. Congress Allowed One Extension.

Congress Allowed One Extension

On January 17, 2025, the Supreme Court upheld the TikTok divestiture law against a First Amendment challenge.¹ The law took effect two days later.² The day after that, January 20, Donald Trump ordered the Attorney General not to enforce it.² Congress had allowed one extension, of at most 90 days, on conditions.³ Trump instead signed five orders, carrying non-enforcement into January 2026.²⁴⁵⁶⁷ With them he put his own timetable in place of the one Congress wrote for separating TikTok from foreign-adversary control, a protection the Court upheld because of the risk to Americans' personal data.³¹⁷

The responsibility is direct: Trump signed the orders and told the Attorney General to stop enforcement.²⁴⁵⁶⁷ The first stated:

Executive Order 14166, 'Application of Protecting Americans From Foreign Adversary Controlled Applications Act to TikTok,' §2(a), 90 Fed. Reg. 8611²

I hereby order the Attorney General not to take any action on behalf of the United States to enforce the Act for 75 days from the date of this order, to permit my Administration an opportunity to determine the appropriate course of action with respect to TikTok.

Congress enacted the law on April 24, 2024, and gave TikTok 270 days before its prohibitions on app-store distribution and internet hosting took effect.³ To extend that deadline, the President had to certify three things to Congress: a path to a qualified divestiture, evidence of significant progress, and binding agreements allowing completion during the extension.³ None of Trump's five orders invoked that provision or claimed to have certified those conditions.²⁴⁵⁶⁷ Each began with a general invocation of presidential authority under the Constitution and federal law.²⁴⁵⁶⁷

Four More Orders, With Protection Against Later Penalties

Trump renewed the delay three times, the last time through December 16, 2025.⁴⁵⁶ On September 25, a fifth order determined that the proposed divestiture would qualify once its implementation agreements were executed, and directed non-enforcement for 120 days from that date, overlapping the previous delay.⁷

The three renewals⁷

1. April 4, 2025Executive Order 14258 extended non-enforcement to June 19.
2. June 19, 2025Executive Order 14310 extended non-enforcement to September 17.
3. September 16, 2025Executive Order 14350 extended non-enforcement to December 16.

The orders did more than buy time.²⁷ They instructed the Justice Department not to impose penalties later for conduct during the delays or before the orders, including conduct from the law's January 19 effective date.²⁴⁵⁶⁷ They also directed the Attorney General to send providers letters asserting that there had been no statutory violation and no liability for the covered conduct.²⁴⁵⁶⁷

Congress had told the Attorney General to investigate potential violations and, upon finding one, to pursue enforcement.³ Trump directed the officer Congress charged with that task to leave the law unenforced and promise providers protection from its penalties.³²

A Data-Protection Deadline Lost Its Force

The Supreme Court said what the law protected: the sensitive data of 170 million U.S. TikTok users.¹ It described TikTok's access to extensive personal information, including contact lists and behavioral data, and upheld Congress's judgment that Chinese control created a national-security risk: the risk that China could compel access to those data.¹ Justice Gorsuch's concurrence said TikTok also mined data about millions of people who had not consented to share their information, including through users' contact lists.¹

Trump had identified that threat himself.¹ The Supreme Court recounted his 2020 finding that TikTok "automatically captures vast swaths of information from its users" and was susceptible to use in China's interests.¹ As the Court recounted, federal courts blocked his earlier prohibitions before they took effect, finding that they exceeded executive authority under the International Emergency Economic Powers Act.¹

Congress's remedy was to stop covered distribution and hosting until a qualified divestiture ended foreign-adversary control and prohibited continuing operational ties involving algorithms or data sharing.³ Trump's orders left that remedy unenforced for roughly a year, from the January 2025 effective date to the venture announced in January 2026.³²⁷⁸

The law threatened a violating provider with a civil penalty of up to $5,000 for each user who accessed, maintained or updated the app as a result of the violation.³ Trump's orders told the Justice Department to forgo those penalties, even after the delays ended.²⁷

The Strongest Defense, and Its Limit

Trump's strongest defense joins executive discretion over enforcement to a practical goal: negotiating a solution that protected national security while keeping TikTok available to its users, creators and businesses.⁹²⁷ His September order recorded that the Vice President led the interagency process at Trump's direction; Trump determined that the proposed divestiture resolved the national-security concerns and complied with the Act.⁷ Congress does authorize the President to determine whether a divestiture qualifies, and a completed qualified divestiture ends the prohibitions even if it occurs after the original deadline.³

The negotiations produced a venture.⁸ On January 23, 2026, TikTok announced that TikTok USDS Joint Venture LLC had been established, with majority American ownership and ByteDance retaining 19.9%.⁸ The company said U.S. data and the recommendation algorithm would be secured in Oracle's U.S. cloud, while TikTok global's U.S. entities would handle interoperability, e-commerce, advertising and marketing.⁸ It also said the venture would retrain, test and update the algorithm on U.S. user data, control content-moderation decisions, and operate a privacy and cybersecurity program audited and certified by third-party experts.⁸ Keeping the platform available while creating the new venture achieved part of Trump's stated goal.²⁷⁸

The legal defense has a limit.⁹³ In Heckler v. Chaney, the Supreme Court recognized a presumption against judicial review of agency non-enforcement decisions, but also said Congress can constrain enforcement discretion through statutory directions.⁹ It pointed to Dunlop v. Bachowski, where a law requiring the Labor Secretary to investigate a complaint and sue if specified conditions were met supplied standards for judicial review.⁹ The Court also expressly left open whether its presumption against review would cover a general non-enforcement policy so extreme that it amounted to abandoning the agency's statutory responsibilities.⁹ Here Congress required investigations and supplied a single, conditional extension, rather than an open-ended series of delays.³ Approving a later divestiture used an authority Congress granted; it did not supply statutory authority for the earlier non-enforcement orders.³⁷

Where It Stands on October 10, 2026

The venture did not end the dispute: in Tan v. Trump, petitioners challenge the delays and the deal, alleging that ByteDance retained ownership of the recommendation algorithm and licensed it to the U.S. venture, while continuing to run commercial operations, in violation of the law's ban on continuing operational relationships.¹⁰ They allege that ByteDance staff continued receiving aggregated American user data after the deal.¹⁰ They allege that Trump steered the sale to firms or executives who had financed his political projects or enriched him, excluding Frank McCourt's competing $20 billion bid, which they say was $6 billion higher.¹⁰ And they allege that the arrangement cost former ByteDance employee John Doe his job by making his U.S. role redundant.¹⁰

Tan owns stock in Alphabet, YouTube's parent; Reid owns stock in Meta, Instagram's parent; and Doe holds restricted stock units in ByteDance. They allege financial losses from the government's handling of TikTok.¹⁰

The government moved to dismiss on May 21, arguing that the challenge came after the law's 90-day deadline and that the petitioners had not shown personal injuries giving them a right to sue.¹¹ The government counts the 90 days from Trump's September 25, 2025 order.¹¹ According to the Clearinghouse's account of their June 1 response, petitioners instead count from his January 22, 2026 completion and announcement of the deal, which they argue made their March 5 petition timely.¹² Sharing aggregated data, it argues, does not establish an individual privacy injury; petitioner Garrett Reid has not shown his own data was shared or faces an imminent risk of sharing; and the claimed losses depend on speculative or independent actions by third parties.¹¹ The government also argues that shareholders generally cannot sue to vindicate injuries to the companies in which they invest, separately from its objections that the claimed stock losses are speculative.¹¹ On the bid, it responds that a higher cash payment with a lower retained equity stake was not necessarily better for ByteDance, and that ByteDance's board independently had to approve the deal.¹¹

On July 20, the D.C. Circuit sent the dismissal request to the judges assigned to decide the case and ordered further briefing.¹³ As of October 10, 2026, the Civil Rights Litigation Clearinghouse listed the case as ongoing, with no prevailing party or relief granted.¹² The Supreme Court's January 2025 decision did not decide the validity of Trump's later orders.¹

The TikTok delays were one of several disputes over Trump's execution of Congress's laws; Congress's research service also questioned the statutory theory used to carry out his military-pay directive.¹⁴

The Constitution requires that the President "take Care that the Laws be faithfully executed".¹⁵ Trump signed five orders withholding enforcement and directing protection from later penalties.²⁴⁵⁶⁷ For roughly a year, the remedy Congress chose for the data of 170 million U.S. users went unenforced.³¹⁷ The charge is abuse of presidential power: he replaced Congress's limited extension and mandatory enforcement scheme with his own timetable and assurances to providers.³²⁷