Cyber Crime
Meta Penalized Over Rs 213 Crore for Exploiting WhatsApp Data—Here’s What It Means for You
The CCI penalized Meta Rs 213.14 crore over WhatsApp’s 2021 privacy policy, citing unfair practices, and ordered user-friendly opt-outs for data sharing till 2029.
NEW DELHI: The Competition Commission of India (CCI) has imposed a major fine of Rs 213.14 crore on Meta Platforms for anti-competitive practices in relation to WhatsApp’s 2021 privacy policy update.
The decision, announced on November 18, marks a stern stance by the regulatory body against the controversial data-sharing practices that were introduced under the policy.
Background: A Controversial Policy Update
In January 2021, WhatsApp informed users about an updated privacy policy and terms of service, which expanded the scope of data collection and made sharing with Meta-owned platforms, such as Facebook and Instagram, mandatory. Unlike the 2016 policy, which offered users the choice to opt out of data sharing with Facebook, the new terms forced users to accept the policy or lose access to the app. This approach sparked a massive backlash from privacy advocates and users, leading to an increase in downloads of rival platforms like Signal and Telegram.
ALSO READ: Nominations Open for ‘Women in Cyber’ Honors at FutureCrime Summit 2025
India, being WhatsApp’s largest market with over 500 million active users, played a critical role in highlighting the concerns surrounding the update. Privacy activists argued that the “take-it-or-leave-it” approach unfairly compelled users to surrender their data, raising questions about user rights and data autonomy.
The CCI’s Findings
The CCI concluded that the 2021 privacy policy update violated Section 4(2)(a)(i) of the Competition Act, 2002, which prohibits abuse of a dominant position. According to the Commission, the mandatory nature of the update constituted an “imposition of unfair conditions.”
The order noted that users were compelled to accept extensive data-sharing practices within the Meta ecosystem without an option to opt out.
In addition to the monetary penalty, the CCI issued a cease-and-desist order, directing Meta and WhatsApp to implement specific behavioral changes to ensure compliance with its directives.
CCI imposes a monetary penalty of ₹213.14 crore on Meta for 2021 Privacy Policy Update, along with a cease-and-desist direction and specific behavioral remedies. pic.twitter.com/JUNCHP9oF0
— CCI (@CCI_India) November 18, 2024
ALSO READ: Nominations Open for FCRF Excellence Awards Honoring Fraud Risk Management Professionals at FutureCrime Summit 2025
Key Directions to Meta and WhatsApp
- Restrictions on Data Sharing for Advertising
WhatsApp has been barred from sharing user data collected on its platform with other Meta companies or platforms for advertising purposes until 2029. - Transparency in Data Sharing
The CCI mandated WhatsApp to provide a detailed explanation of the type of data being shared, the purpose behind it, and the specific Meta products or services involved. - Opt-Out Option for Users
Users, including those who accepted the 2021 update, must be given the choice to opt out of data sharing for purposes other than providing WhatsApp services. This opt-out option must be prominently displayed through an in-app notification. - Flexibility to Modify Preferences
WhatsApp is required to introduce a prominent feature within its settings that allows users to review and modify their data-sharing preferences at any time.
ALSO READ: FutureCrime Summit 2025: Honoring Excellence in Cyber Forensics and OSINT Innovation
Meta’s Market Dominance and the Broader Implications
The CCI noted that Meta holds a dominant position in two key markets in India: the market for Over-the-Top (OTT) messaging apps and the online display advertising market. By leveraging WhatsApp’s vast user base, Meta sought to strengthen its dominance in online advertising. The Commission found this strategy to be detrimental to both competition and consumer interests.
This decision sends a clear message to technology giants about the need to respect user privacy and adhere to fair practices. It also highlights the Indian regulator’s proactive approach to safeguarding consumer rights in the digital economy.
A Long Road Ahead
The CCI’s order reflects its commitment to addressing concerns related to data privacy and anti-competitive practices. For Meta and WhatsApp, this ruling not only imposes financial consequences but also sets a precedent for greater accountability in handling user data. As the world becomes increasingly digital, this case underscores the importance of balancing business interests with the rights of users.
The public version of the order will soon be available on the CCI’s website, offering detailed insights into the regulatory framework and the rationale behind the decision.