French privacy watchdog raps WhatsApp over Facebook data sharing

The CNIL said it did not have the legal basis to share user data with Facebook


Reuters December 19, 2017
Facebook’s trio of social networks now have in excess of a billion active users. PHOTO: AFP

France’s data privacy watchdog may fine messaging app WhatsApp if it does not comply with an order to bring its sharing of user data with parent company Facebook into line with French privacy law.

The French data protection authority - CNIL - said on Monday it had told WhatsApp to comply with the order within one month, and pay particular attention to obtaining users’ consent. If Whatsapp does not comply it could sanction the company, the watchdog said.

The CNIL said WhatsApp did not have the legal basis to share user data with Facebook and had violated its obligation to cooperate with the French authority.

China's Tencent becomes more valuable than Facebook

WhatsApp, bought by Facebook in 2014, said it would begin sharing some user data with the social media group in 2016, drawing warnings from European privacy watchdogs about getting the appropriate consent.

In October, European Union privacy regulators rapped WhatsApp for not resolving their concerns over the messaging service’s sharing of user data with Facebook a year after they first issued a warning.

The French regulator said that WhatsApp had not properly obtained users’ consent to begin sharing their phone numbers with Facebook for “business intelligence” purposes.

“The only way to refuse the data transfer for “business intelligence” purpose is to uninstall the application,” the CNIL said in a statement.

Facebook Messenger may soon adopt Snapchat-like 'streaks'

The regulator accepted that the transfer of user data for security purposes seemed to be essential to the functioning of the application. But the watchdog also said the same did not apply for “business intelligence” purposes which aim to improve the apps’ performance.

European data protection authorities can only impose small fines at the moment, but a new EU privacy law entering into force next year will increase fines to up to 4 per cent of a company’s global turnover.

The CNIL said it had repeatedly asked WhatsApp to provide a sample of French users’ data transferred to Facebook but the company had explained it could not do so as it is located in the United States and “it considers that it is only subject to the legislation of this country.”

COMMENTS

Replying to X

Comments are moderated and generally will be posted if they are on-topic and not abusive.

For more information, please see our Comments FAQ