WhatsApp secures permission to challenge €225 million GDPR fine
The company has been granted the power to challenge Ireland’s fine over the way it shares user data
WhatsApp has secured permission in Ireland’s High Court to challenge the Data Protection Commission’s (DPC) decision to fine the company €225 million in August over its lack of transparency in the way it shares user data.
WhatsApp is aiming to quash the DPC’s decision and seek declarations from the court, which include that certain parts of the 2018 Data Protection Act are invalid and unconstitutional and are incompatible with Ireland’s obligations under the European Convention on Human Rights.
The DPC issued WhatsApp with a penalty in August, which was approved by the European Data Protection Board (EDPB), after a two-year investigation which found the company had been unclear in the way it processed and shared data with Facebook, as well as between WhatsApp and other Facebook-owned companies.
The investigation found that the company violated Article 14 of GDPR, which states that data controllers must provide data subjects with sufficient information about the way data is collected and processed.
The top three IT pains of the new reality and how to solve them
Driving more resiliency with unified operations and service managementFree download
The DPC’s draft findings from last December outlined the fine should be between €30 million and €50 million before the EDPB issued a binding decision in July with a “clear instruction” for the watchdog to increase its provisional fine. The DPC raised it several times higher, and issued requirements for WhatsApp to take steps to improve its GDPR compliance as well.
In September, campaigners claimed that the DPC was failing to process a surging backlog of hundreds of GDPR cases against big tech firms which was hindering pan-European data protection enforcement as a result. In the three years between May 2018 and May 2021 the data regulator only sent four draft decisions to the EPDB for examination and approval.
The report called the country “the big EU bottleneck” and said EU GDPR enforcement is “paralysed” due to Irenalnd’s failure to deliver draft decisions on cross-border cases.
Activation playbook: Deliver data that powers impactful, game-changing campaigns
Bringing together data and technology to drive better business outcomesFree Download
In unpredictable times, a data strategy is key
Data processes are crucial to guide decisions and drive business growthFree Download
Achieving resiliency with Everything-as-a-Service (XAAS)
Transforming the enterprise IT landscapeFree Download
What is contextual analytics?
Creating more customer value in HR software applicationsFree Download