WhatsApp has been hit with a fine of €225m euros by the Irish data protection commissioner, following an investigation into GDPR practices at the company.
The record fine came after the probe found WhatsApp had breached European Union laws on transparency, and the sharing of user information with other companies owned by Facebook.
In addition to the fine, the office of the data protection commissioner (DPC) in Dublin has issued a “reprimand” to WhatsApp, and ordered it to bring its processing into compliance with EU standards.
The investigation began on December 10 2018 and examined if WhatsApp had complied with its obligations under the EU’s General Data Protection Regulation (GDPR).
It is the second, and largest fine issued by the DPC under the GDPR, after Twitter was hit with a €450,000 penalty in 2020 over a security breach.
The investigation into the Facebook-owned messaging service examined if the company had met its transparency obligations around the provision of information to both users and non-users.
This included whether users had been provided with information about data sharing between WhatsApp and other Facebook companies.
In a press statement, WhatsApp said the fine was “disproportionate” and said it will appeal the ruling.
WhatsApp is committed to providing a secure and private service.
We have worked to ensure the information we provide is transparent and comprehensive and will continue to do so.
We disagree with the decision today regarding the transparency we provided to people in 2018 and the penalties are entirely disproportionate.
The DPC initially imposed a smaller fine, but this was objected to by regulators in other EU member states.
A binding decision
On July 28 2021, the European Data Protection Board (EDPB) adopted a binding decision which was then notified to the DPC. A DPC statement said:
This decision contained a clear instruction that required the DPC to reassess and increase its proposed fine on the basis of a number of factors contained in the EDPB’s decision and following this reassessment the DPC has imposed a fine of 225 million euro on WhatsApp,
In addition to the imposition of an administrative fine, the DPC has also imposed a reprimand along with an order for WhatsApp to bring its processing into compliance by taking a range of specified remedial actions.
The Irish DPC is the lead supervisor of GDPR rules in the EU, because a large number of firms, including Facebook, WhatsApp and others, have their European headquarters based in Dublin.
We need your help to keep speaking the truth
Every story that you have come to us with; each injustice you have asked us to investigate; every campaign we have fought; each of your unheard voices we amplified; we do this for you. We are making a difference on your behalf.
Our fight is your fight. You’ve supported our collective struggle every time you gave us a like; and every time you shared our work across social media. Now we need you to support us with a monthly donation.
We have published nearly 2,000 articles and over 50 films in 2021. And we want to do this and more in 2022 but we don’t have enough money to go on at this pace. So, if you value our work and want us to continue then please join us and be part of The Canary family.
In return, you get:
* Advert free reading experience
* Quarterly group video call with the Editor-in-Chief
* Behind the scenes monthly e-newsletter
* 20% discount in our shop
Almost all of our spending goes to the people who make The Canary’s content. So your contribution directly supports our writers and enables us to continue to do what we do: speaking truth, powered by you. We have weathered many attempts to shut us down and silence our vital opposition to an increasingly fascist government and right-wing mainstream media.
With your help we can continue:
* Holding political and state power to account
* Advocating for the people the system marginalises
* Being a media outlet that upholds the highest standards
* Campaigning on the issues others won’t
* Putting your lives central to everything we do
We are a drop of truth in an ocean of deceit. But we can’t do this without your support. So please, can you help us continue the fight?