WhatsApp to Comply With India Data-Sharing Rules

The legal battle stems from WhatsApp's 2021 privacy policy update, which mandated data sharing with Meta and removed the opt-out choice available in the 2016 version. This "take-it-or-leave-it" approach triggered a suo motu investigation by the Competition Commission of India (CCI), which found it to be an abuse of WhatsApp's dominant market position. The CCI's investigation concluded that the policy imposed unfair conditions on users, effectively coercing them into accepting expanded data collection. In November 2024, the regulator imposed a ₹213.14 crore (approx. $25.3 million) penalty on Meta and issued several directives, including a five-year ban on sharing user data with Meta for advertising purposes. WhatsApp and Meta challenged the CCI's jurisdiction and ruling, escalating the case through the National Company Law Appellate Tribunal (NCLAT) and eventually to the Supreme Court. While the NCLAT upheld the monetary penalty, it set aside the five-year data-sharing ban for advertising, a decision the CCI is now appealing in the Supreme Court. Following a sharp rebuke from the Supreme Court, which stated it would not allow companies to "play with the right to privacy of citizens," WhatsApp agreed to comply with the CCI's directives. The court had criticized the policy for making a "mockery" of India's constitutionalism and highlighted the difficulty for ordinary users to understand the terms. Under the new framework, which WhatsApp is expected to implement by March 16, 2026, users must be given a clear opt-out for data sharing for non-core services. Access to the messaging service cannot be conditional on users consenting to share their data with other Meta companies for purposes beyond providing WhatsApp's core functions. This compliance addresses the CCI's core concern about leveraging dominance, where data from its vast user base in India—its largest market—could create unfair advantages and entry barriers in other markets, like online advertising. The main appeal against the penalty and the CCI's cross-appeal regarding the advertising data-sharing ban remain pending before the Supreme Court. WhatsApp has argued that a complete ban on data sharing would harm the thousands of small Indian businesses that use the platform to connect with customers through targeted ads. The company stated that around 200,000 Indian advertisers use Meta's platforms to direct customers to WhatsApp. The case is a landmark in India for viewing data privacy as a crucial component of competition law. It intersects with India's broader push for data protection, including the Digital Personal Data Protection Act, 2023, signaling increased scrutiny of how global tech platforms operate in the country.