WhatsApp will not share data with Facebook

WhatsApp will not share user data with Facebook until it complies with GDPR ICO closes investigation		
	Ingrid Lunden

   	11 hours

WhatsApp will not share user data with Facebook until it complies with GDPR ICO closes investigation Ingrid Lunden @ 11 hours

The move comes after a years-long battle between the biz and European data protection agencies, which argued that changes to WhatsApp's small print hadn't been properly communicated and didn't comply with EU law.

The whole furore began in in August 2016 when Facebook controversially chose to update WhatsApp terms of service and privacy policy to include WhatsApp data sharing with the social network. Moreover, any such sharing would have been in breach of the Data Protection Act.

The ICO said its investigation has found that had the firm shared user data, it would have been illegal.

At the heart of the issue is consent. Following that, the company will share data in compliance with the new rules.

Similarly, they felt that WhatsApp's use of pre-ticked boxes was not "unambiguous" and that the information provided to users was "insufficiently specific".

You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

The investigation - which looked only at situations where WhatsApp wanted to share information with Facebook for business interests, not service support - confirmed concerns that the policy wasn't up to scratch.

"WhatsApp has not identified a lawful basis of processing for any such sharing of personal data", information commissioner Elizabeth Denham said, adding that "if they had shared the data, they would have been in contravention of the first and second data protection principles of the Data Protection Act".

The watchdog doesn't believe if there is any reason why WhatsApp would need to share user data with Facebook as the messaging service failed to provide lawful basis for this requirement.

WhatsApp has maintained that it hasn't shared any personal data with Facebook in the European Union, but in a letter to the biz's general counsel Anne Hoge, Denham indicated that this had not been made clear at the outset.

As Denham points out, there are two other takeaways from this case.

As WhatsApp has agreed not to share data with Facebook, for now at least, the firm has not incurred a financial penalty.

Denham's letter makes it clear that the companies will be working to make sure that data sharing can go ahead in a lawful way, particularly for system security purposes, for which it may consider using the "legitimate interests" processing condition. Concerns about possible inappropriate data sharing were raised by media reports, civil society groups, and data protection authorities globally as a result of WhatsApp updating their terms and conditions and privacy policy. Crucially, WhatsApp built its reputation on setting itself apart from social services like Facebook and its reliance on advertising, and all the data manipulation the comes along with that.

The French data protection authority (CNIL) is in the process of bringing enforcement action against WhatsApp.

In a statement sent to The Register, WhatsApp emphasised the pause it had put on data sharing.

The Information Commissioners Office (ICO) has completed its two years investigation in the data-sharing practices of WhatsApp. It's not a permanent commitment, and there are a few noteworthy exceptions, but it's good news for WhatsApp users who give a damn about their privacy.

Altre Notizie