This Act may be cited as the “No TikTok on Government Devices Act”.

(a) Definitions.—In this section—

(1) the term “covered application” means the social networking service TikTok or any successor application or service developed or provided by ByteDance Limited or an entity owned by ByteDance Limited;

(2) the term “executive agency” has the meaning given that term in section 133 of title 41, United States Code; and

(3) the term “information technology” has the meaning given that term in section 11101 of title 40, United States Code.

(b) Prohibition on the use of TikTok.—

(1) IN GENERAL.—Not later than 60 days after the date of the enactment of this Act, the Director of the Office of Management and Budget, in consultation with the Administrator of General Services, the Director of the Cybersecurity and Infrastructure Security Agency, the Director of National Intelligence, and the Secretary of Defense, and consistent with the information security requirements under subchapter II of chapter 35 of title 44, United States Code, shall develop standards and guidelines for executive agencies requiring the removal of any covered application from information technology.

(2) NATIONAL SECURITY AND RESEARCH EXCEPTIONS.—The standards and guidelines developed under paragraph (1) shall include—

(A) exceptions for law enforcement activities, national security interests and activities, and security researchers; and

(B) for any authorized use of a covered application under an exception, requirements for agencies to develop and document risk mitigation actions for such use.