WhatsApp Delays Privacy Policy Update Amid GDPR Scrutiny
WhatsApp has delayed its updated data privacy policy, averting a potential account loss for users who hadn't accepted the new terms. Meanwhile, the Irish Data Protection Commission (DPC) is scrutinising WhatsApp's compliance with GDPR transparency rules, with a draft decision sent to EU authorities for review.
In February, WhatsApp announced it would suspend its new privacy policy, initially set for February 8, following intense backlash. Users will not lose their accounts for not accepting the updated terms, at least for now.
The DPC, as the lead authority for Facebook Group companies in the EU, is investigating WhatsApp's compliance with GDPR Articles 12-14. This probe focuses on transparency in data sharing with Facebook. The DPC has sent a draft decision to fellow EU data protection authorities for review, marking only the second such case under the GDPR's cross-border rules. This process aims to ensure a consistent approach across the EU.
In 2021, the DPC fined WhatsApp for lacking transparency in data transfers between WhatsApp and Facebook, following an investigation into GDPR transparency requirements. The final decision in this current case will set a standard for transparency expected from WhatsApp in EU data protection laws. Additionally, a 2018 case regarding the transparency of data-sharing between Facebook and WhatsApp is nearing its final decision.
WhatsApp's delayed policy gives users more time to review and accept the new terms. The DPC's investigation into WhatsApp's GDPR compliance will help establish clear expectations for data sharing transparency within the EU. The final decision in this case will provide important guidance for WhatsApp and other tech companies operating in the EU.
