Chinese-Owned Apps and Privacy: What the CamScanner Executive Order Revealed

On January 5, 2021, Executive Order 13971 banned transactions with CamScanner and seven other Chinese-developed apps, citing concerns that these apps "may access and steal personally identifiable information."

The order was later revoked, but the privacy concerns it raised remain relevant. Here's what happened and what it means for users.

What Executive Order 13971 Did

The Banned Apps

The executive order targeted eight apps developed by Chinese companies:

• Alipay (payment app)
• CamScanner (document scanner)
• QQ Wallet (payment app)
• SHAREit (file sharing)
• Tencent QQ (messaging)
• VMate (video sharing)
• WeChat Pay (payment app)
• WPS Office (office suite)

The Stated Reasons

According to the executive order, these apps posed a threat because:

• They "may access and steal personally identifiable information"
• They could enable "China's military, intelligence, and security apparatuses" to access user data
• Chinese law could require companies to share data with the government

Timeline

• January 5, 2021: Executive Order 13971 signed
• February 19, 2021: Ban was scheduled to take effect
• June 9, 2021: Biden's Executive Order 14034 revoked the ban

Why the Ban Was Revoked

The Biden administration took a different approach to Chinese app regulation:

• Broader review of connected software applications
• Focus on risk-based evaluation rather than app-by-app bans
• ICTS (Information and Communications Technology and Services) rule development

The revocation didn't mean the apps were declared "safe"—just that the regulatory approach changed.

CamScanner's Specific Concerns

CamScanner had additional issues beyond the executive order:

2019 Malware Incident

Before the executive order, Kaspersky discovered malware in CamScanner:

• Trojan Dropper found in Android app
• Affected versions from June 16-July 25, 2019
• Could download additional malicious code
• Showed intrusive ads and made unauthorized purchases

Privacy Policy Concerns

CamScanner's current privacy policy states:

• Documents are uploaded to CamScanner servers
• Data is shared with affiliates and third parties "under certain circumstances"
• Encryption is applied "if possible" (not guaranteed)

Chinese Data Laws

Apps from Chinese companies operate under Chinese law, which includes:

National Intelligence Law (2017)

Article 7: "All organizations and citizens shall support, assist, and cooperate with national intelligence efforts."

Cybersecurity Law (2017)

Requires network operators to provide "technical support and assistance" to public security and national security organs.

Data Security Law (2021)

Regulates data processing and can require data sharing with authorities.

What This Means for Users

Potential Risks

• Government access: Chinese law may require data sharing
• Data location: Where are servers located?
• Third-party sharing: Who else can access your data?
• Security practices: What encryption is used?

Who Should Be Concerned

• Government employees and contractors
• People with security clearances
• Business users with sensitive information
• Healthcare providers (HIPAA considerations)
• Legal professionals (confidentiality obligations)

Who Might Not Care

• Casual users scanning non-sensitive documents
• Users comfortable with the privacy trade-off

Alternatives for Privacy-Conscious Users

If you're concerned about data going to overseas servers:

• On-device processing: Apps like ScanDash process documents locally
• US-based clouds: Adobe Scan, Microsoft Lens (still cloud, but US jurisdiction)
• EU-based options: Genius Scan (France)

Making Your Own Decision

Consider these questions:

1. What kind of documents do you scan?
2. Are you subject to any data security requirements?
3. Does your employer have policies about app usage?
4. Are you comfortable with the privacy policy?

The Bottom Line

The 2021 executive order highlighted legitimate concerns about data practices of apps developed by Chinese companies. While the ban was revoked, the underlying issues—data sovereignty, government access, and privacy policies—remain relevant considerations when choosing which apps to trust with your documents.

For sensitive documents, consider apps that either process locally (keeping data on your device) or operate under jurisdictions with privacy laws you trust.