Supreme Court Questions Meta & WhatsApp Over Privacy Policy

The Supreme Court of India sharply questioned Meta Platforms and WhatsApp LLC regarding their privacy policies on Tuesday, signaling it will not permit the exploitation of Indian citizens’ personal data. The Court is currently reviewing appeals from Meta and WhatsApp, challenging a judgment from the National Company Law Appellate Tribunal (NCLAT).

Background of the Case

The dispute stems from a November 2024 order by the Competition Commission of India (CCI) examining WhatsApp’s 2021 privacy policy update. The CCI determined WhatsApp, holding a dominant position in India’s messaging market, imposed a “take-it-or-leave-it” framework on users, restricting meaningful opt-out options. This was deemed an abuse of dominant position under the Competition Act, 2002, resulting in a ₹213.14 crore penalty for Meta Platforms.

Court’s Concerns

Chief Justice of India Surya Kant, along with Justices Joymalya Bagchi and Vipul Pancholi, expressed significant concerns about the privacy policy. The CJI even began drafting an order to restrain the platforms from sharing data, though this was paused when counsel for Meta and WhatsApp asserted the NCLAT had ruled in their favor on this specific point.

Did You Know? The CCI imposed a penalty of ₹213.14 crore on Meta Platforms for violating competition laws related to data sharing.

The Court questioned the notion of user “choice” given WhatsApp’s market dominance. “What is the choice? You have complete monopoly in the market and you are saying I am giving a choice. It’s either you walk out of WhatsApp policy or we will share the data,” the CJI stated. Concerns were also raised about the complexity of the policy language and whether the average citizen could understand it.

Data Exploitation and Value

Solicitor General of India Tushar Mehta submitted that personal data is not only sold but also “commercially exploited.” Justice Bagchi indicated the Court intends to examine how WhatsApp “rents out” user data and how behavioral trends are used for targeted advertising. The Court also questioned the lack of valuation placed on data sharing, contrasting it with regulations in the European Union.

Expert Insight: The Court’s focus on the commercial value of personal data signals a growing awareness of the economic implications of data privacy, moving beyond simply protecting against unauthorized access to considering the benefits companies derive from its use.

The CJI cited a personal experience, noting how advertisements for medicine appeared shortly after discussing health concerns with a doctor via WhatsApp. While counsel for WhatsApp, including Senior Advocates Mukul Rohatgi and Akhil Sibal, emphasized end-to-end encryption, the Court remained skeptical about the extent of data protection.

What Happens Next

Meta and WhatsApp have been asked to file an affidavit outlining their data activities. The Court has indicated it will consider the matter further after reviewing the affidavit. The Ministry of Electronics and Information Technology has also been added as a party to the case. The Court could dismiss the appeals if it is not satisfied with the undertakings provided. Alternatively, it may proceed to hear the appeals on their merits. A Constitution Bench is already examining WhatsApp’s privacy policy, and an undertaking exists that users will not be barred from the platform for not accepting the 2021 policy.

Frequently Asked Questions

What prompted the Supreme Court’s intervention?

The Supreme Court intervened following appeals from Meta Platforms and WhatsApp LLC challenging a judgment from the NCLAT, which upheld a penalty imposed by the CCI regarding WhatsApp’s 2021 privacy policy.

What was the CCI’s primary concern with WhatsApp’s privacy policy?

The CCI found that WhatsApp imposed a “take-it-or-leave-it” framework on users, denying them a meaningful opt-out from sharing their data with other Meta Platforms entities, constituting an abuse of its dominant position.

What is the Court asking Meta and WhatsApp to do?

The Court has asked Meta and WhatsApp to file an affidavit explaining their data activities and has indicated it will not allow data sharing until it receives an undertaking that user data will not be used.

As data privacy concerns continue to grow globally, how might this case influence the future of data protection regulations in India?