WhatsApp fined 225 million euro by Irish data protection commissioner

2 September 2021, 15:54

An iPhone displaying a WhatsApp logo
WhatsApp fined 225 million euro by Irish data protection commissioner. Picture: PA

The record fine came after the probe found WhatsApp had breached European Union laws on transparency.

WhatsApp has been hit with a fine of 225 million euros by the data protection commissioner, following an investigation into GDPR practices at the company.

The record fine came after the probe found WhatsApp had breached European Union laws on transparency, and the sharing of user information with other companies owned by Facebook.

In addition to the fine, the office of the data protection commissioner (DPC) in Dublin has issued a “reprimand” to WhatsApp, and ordered it to bring its processing into compliance with EU standards.

The investigation began on December 10 2018 and examined if WhatsApp had complied with its obligations under the EU’s General Data Protection Regulation (GDPR).

It is the second, and largest fine issued by the DPC under the GDPR, after Twitter was hit with a 450,000 euro penalty in 2020 over a security breach.

The investigation into the Facebook-owned messaging service examined if the company had met its transparency obligations around the provision of information to both users and non-users.

This included whether users had been provided with information about data sharing between WhatsApp and other Facebook companies.

In a press statement, WhatsApp said the fine was “disproportionate” and said it  will appeal the ruling.

They said: “WhatsApp is committed to providing a secure and private service.

“We have worked to ensure the information we provide is transparent and comprehensive and will continue to do so.

“We disagree with the decision today regarding the transparency we provided to people in 2018 and the penalties are entirely disproportionate.”

The DPC initially imposed a smaller fine, but this was objected to by regulators in other EU member states.

On July 28 2021, the European Data Protection Board (EDPB) adopted a binding decision which was then notified to the DPC.

“This decision contained a clear instruction that required the DPC to reassess and increase its proposed fine on the basis of a number of factors contained in the EDPB’s decision and following this reassessment the DPC has imposed a fine of 225 million euro on WhatsApp,” a DPC statement said.

“In addition to the imposition of an administrative fine, the DPC has also imposed a reprimand along with an order for WhatsApp to bring its processing into compliance by taking a range of specified remedial actions.”

The Irish DPC is the lead supervisor of GDPR rules in the EU, because a large number of firms, including Facebook, WhatsApp and others, have their European headquarters based in Dublin.

By Press Association

More Technology News

See more More Technology News

Sam Thompson using an Echo device to support living with ADHD

Amazon launches campaign to show how Alexa can support those with ADHD

Microsoft introduced the AI assistant button

More funding needed for women-led AI start-ups, report says

Westminster

MPs shown Scottish-made ‘unicorn’ satellite at committee meeting

Facebook staff lay offs

Former Meta HQ in London to become science and tech hub

A Nationwide Building Society sign

Nationwide Building Society launches British Sign Language service

Cyber threat report

UK in ‘better position’ against cyber attacks, but most businesses not resilient

Drone

Flying taxis could take off in two years under Government drones plan

Supermarket technical issues

Tesco and Sainsbury’s hit with technical issues on same day

Apple logo in window of store

Norfolk County Council secures settlement as Apple agrees £384m lawsuit payment

Civil Service roles to relocate

Whitehall lacks the skills to implement AI, says National Audit Office

Laptop under cyber attack

Health board hit by cyber attack with ‘significant quantity’ of data at risk

Children and violent online content

Encountering violent online content starts at primary school – Ofcom

Bitcoin

Australian computer scientist is not Bitcoin founder Satoshi, High Court rules

Google website

Google starts rollout of restrictions on AI as key global election year looms

The gov.uk website

NHS and Government websites should be made free of data charges, ministers told

Schools minister Damian Hinds

Getting a mobile phone ‘a rite of passage’ for children, says schools minister