Preiskel & CoPreiskel & Co
Preiskel & Co
  • Home
  • About Us
    • Diversity, Social Responsibility, and Pro Bono
  • Services
    • Corporate
    • Commercial
    • Regulatory
    • Competition & Antitrust
    • Data Protection, Privacy, and Retention
    • Intellectual Property
    • Dispute Resolution
    • Employment
  • Sectors
    • Telecommunications
    • IT, Technology, & Internet
    • Media and Broadcasting
    • Websites, Blogging, & Social Media
    • Film & Television
    • Gambling & Online Gaming
    • Leisure & Retail
    • Energy & Minerals
    • Cryptocurrency & Blockchain
    • Creative Industries
  • People
    • Daniel Preiskel
    • Ronnie Preiskel
    • Tim Cowen
    • Jose Saras
    • Robert Dougans
    • Karthyaeni Vittala
    • Tina Cowen
    • D A T Green
    • Richard Stewart
    • Mor Swiel
    • Ilanit Appelfeld
    • Stephen Dnes
    • Daniel Oakland
    • Robert Harvey
    • Martina Raciti
    • Joanna Coombs-Huang
    • Xavier Prida
    • Stewart White
    • Alison MacFarlane
    • Hannah Leader
    • Peter Dally
    • Antony Corel
    • Sue Warwick
    • Tony Curzon-Price
    • Shardi Shameli
    • Stephen Hornsby
    • Ewelina James
    • Maria Constantin
    • Sophia Yakhno
    • Rachael Machado
  • International
  • Blog
  • News
    • Publications
  • Contact
Menu back  

Transparency matters: WhatsApp fined EUR 225 million for violating transparency obligations under the GDPR

September 3, 2021By Preiskel & Co

On 2nd September 2021 the Irish Data Protection Commission (”DPC”) imposed its biggest fine to date on WhatsApp, the messaging app owned by Facebook.

In its reasoning (available here) the DPC considered both: the information provided by WhatsApp to its users, and perhaps more importantly  the lack of information provided to non-users.  Namely, it was held that the available ‘Contact Feature’ includes phone numbers of non-users that constitute personal data even after the lossy hashing process (a process that reduces the size of a file by removing certain data). This feature makes non-users unaware of the processing of their personal data, thus violating article 14 of the GDPR.  In the decision the DPC also deemed the information provided to users on data sharing between WhatsApp and the rest of Facebook-owned companies inadequate.

Over the investigation process of nearly 3 years, the DPC initially proposed a fine of EUR 30-50 m. However, after the objections of numerous Supervisory Authorities (‘’SAs’’), the dispute resolution mechanism under article 65(1) GDPR was triggered. With its binding decision, the European Data Protection Board (”EDPB”) (available here) urged the DPC to reassess the fine , among others, due to Facebook’s (parent company) global annual turnover. The DPC responded accordingly by raising the administrative fine to the record EUR 225 million.

The significance of this decision is not solely the record fine, nor the stricter transparency requirements on data sharing with parent companies. It is mostly the intention of the EDPB to impose stricter fines on tech giants. Though the EDPB’s decision is binding only for this specific dispute, it sets the tone for future SA’s decisions and allows them to impose significant fines for similar infringements to ensure consistency.

In response WhatsApp doubted the proportionality of the fine and stated it will appeal the ruling. It remains to be seen whether the appeal will successfully lower the fine for the messaging app.

For now, besides the administrative fine, WhatsApp has a 3-month deadline to ensure its processing becomes GDPR compliant and increase transparency for both users and non-users.

Please contact Jose Saras if you have any questions regarding the above.

The material contained in this article is only for general review of the topics covered and does not constitute any legal advice. No legal or business decision should be based on its content.

Latest Preiskel & Co blog posts
  • White House’s Economic Report of the President sets out a roadmap to improve competition in digital markets
    March 22, 2023
  • Brussels Conference brings in industry leaders to discuss the international antitrust landscape
    March 22, 2023
  • Issues in the UK’s forthcoming Digital Markets, Competition and Consumer Bill
    March 17, 2023
  • Stormy weather for cloud computing in the EU
    March 16, 2023
  • Inmarsat Takeover Provisionally Cleared for Take-Off
    March 10, 2023
  • EDPB’s Feedback on the New EU-U.S. Data Privacy Framework
    March 6, 2023
  • UK Data Reform Bill to return to the House of Commons
    March 3, 2023
  • DCMS Publishes New Security and Privacy Principles for App Store Operators and Developers
    February 16, 2023
  • DPO’s Dismissal & Conflicts of Interest Under The EU GDPR – CJEU Ruling
    February 14, 2023
  • ICO – Change of Deadline for Reporting Breach Notifications for Communication Service Providers
    February 6, 2023
  • General EU Requirements for Cookie Banners – EDPB Task Force Report
    January 27, 2023
  • Ofcom Launches Investigation into BT Following Suspected Breaches of Consumer Protections Post Implementation of EECC
    January 27, 2023

The Preiskel Blog

  • White House’s Economic Report of the President sets out a roadmap to improve competition in digital markets 22 Mar 2023
  • Brussels Conference brings in industry leaders to discuss the international antitrust landscape 22 Mar 2023
  • Issues in the UK’s forthcoming Digital Markets, Competition and Consumer Bill 17 Mar 2023
  • Stormy weather for cloud computing in the EU 16 Mar 2023

Preiskel news

  • Senior Partner, Danny Preiskel, quoted by IT Pro on the costs incurred by MNOs
  • Senior Partner, Danny Preiskel, will be a panellist at GCCM Carrier Community 2023 on IOT
  • Jose Saras and Xavier Prida Awarded First Place as Data Protection Thought Leaders in the UK
  • Ronnie Preiskel chosen to judge 24 May 2023 The Tech Capital Global Awards
Preiskel tweets
  • White House’s Economic Report of the President sets out a roadmap to improve competition in digital markets. Find o… https://t.co/S7J7sX3kfs11 hours ago
  • Brussels Conference brings in industry leaders to discuss the international antitrust landscape. Find out more at: https://t.co/JN5P4COQ4f13 hours ago
  • Stormy weather for cloud computing in the EU. Find out more at: https://t.co/dOpC8u4wLf6 days ago
Preiskel & Co LLP
4 King's Bench Walk,
Temple,
London
EC4Y 7DL
United Kingdom

Tel: +44 20 7332 5640
Email: info@preiskel.com

Find us on:

TwitterLinkedinMail
© Preiskel & Co LLP 2023 | Site map | Legal notices | Cookie Policy | Privacy