Facebook evades EU ban on WhatsApp data use

Data protection panel stops short of imposing bloc-wide ban on data access

The European Data Protection Board on Thursday said Facebook’s practices linked to WhatsApp data should be examined as a matter of priority by the Irish privacy watchdog, its main regulator in the regShow more

Facebook escaped a possible EU ban on its use of WhatsApp customer data but faces an investigation of new terms and services that have sparked outrage among consumer rights campaigners.

The European Data Protection Board, a panel of EU authorities, on Thursday said Facebook’s practices linked to WhatsApp data should be examined “as a matter of priority” by the Irish privacy watchdog, its main regulator in the region.

“Considering the high likelihood of infringements in particular for the purpose of safety, security and integrity of WhatsApp” and other Facebook units, “the EDPB considered that this matter requires swift further investigations”, the EU agency said.

WhatsApp announced the policy changes in January but was forced to delay its introduction until May, because of confusion and user backlash over what data the messaging service collects and how it shares that information with parent Facebook.

This week, consumer rights campaigners filed a complaint against WhatsApp over its “aggressive” policy that remains “opaque”.

In Thursday’s decision, the EDPB stopped short of imposing a provisional EU-wide ban on data access, as requested by the Hamburg data privacy commissioner.

The German authority in May imposed a three-month ban on Facebook to stop it from collecting German users’ data from its WhatsApp unit, and asked EU regulators to take a bloc-wide decision.

A new Irish probe into Facebook and WhatsApp over how user data is being processed or shared would add to some 28 investigations the Irish Data Protection Commission has open into Silicon Valley giants, including Apple and Google, which all have their EU base in Ireland.

Facebook accounts for nine of these investigations and more are pending into its WhatsApp and Instagram businesses.

WhatsApp said it welcomed the decision not to extend the German regulator’s order across the EU, saying it “was based on fundamental misunderstandings as to the purpose and effect of the update to our terms of service”.

“We remain fully committed to delivering secure and private communications for everyone and will work with the Irish Data Protection Commission as our lead regulator in the region in order to fully address the questions raised by the EDPB,” WhatsApp said.

The EU’s General Data Protection Regulation gave data regulators unprecedented powers to fine companies as much as 4 per cent of their annual sales.