WhatsApp’s 2021 Privacy Policy Under Fire in India’s Supreme Court

A major legal confrontation over digital privacy, user consent, and Big Tech regulation is unfolding in India, as WhatsApp’s 2021 privacy policy undergoes intense scrutiny before the Supreme Court of India.

The outcome of this case could shape not only WhatsApp’s operations in India but also establish broader legal standards around data sharing, competition law, and the rights of users in one of the world’s largest digital markets.

Background: The 2021 Privacy Policy Controversy

In January 2021, WhatsApp introduced a revised privacy policy that required users to accept expanded data-sharing practices with its parent company, Meta, in order to continue using the service.

The “Take It or Leave It” Clause

During recent hearings, the Supreme Court strongly criticised WhatsApp’s approach, describing it as a coercive model. The court warned that it would not allow WhatsApp or Meta to "play with" Indians' right to privacy or "make a mockery" of the Constitution, which guarantees privacy as a fundamental right.

The bench further criticised WhatsApp's "take it or leave it policy", saying that it was a way of "committing theft of private information".

India’s competition watchdog, the Competition Commission of India (CCI), earlier observed that the policy gave users "no real choice".

Unlike the 2016 privacy framework — which allowed users to opt out of data sharing for advertising — the 2021 update made acceptance mandatory for continued service access.

The Legal Timeline

CCI Investigation (2021)

The legal battle began in March 2021 when the CCI ordered an investigation into WhatsApp’s updated policy. It alleged that Meta was engaging in "exploitative and exclusionary conduct", arguing that forcing data sharing allowed the company to leverage WhatsApp’s dominant position to deny advertising access to competitors.

CCI Penalty (November 2024)

In November 2024, the CCI fined Meta $25m for "abusing its dominant position". The regulator:

• Ordered behavioural remedies within three months

• Barred WhatsApp from sharing user data with Meta entities for five years

• Directed the company to clearly specify the purposes of data sharing in its privacy policy

Meta and WhatsApp challenged the ruling before a company law tribunal, which upheld the penalty but stayed the five-year ban on data sharing.

Supreme Court Appeal (January 2026)

In January 2026, Meta and WhatsApp moved the Supreme Court to contest the fine. The court has not yet ruled on the penalty, and proceedings are ongoing.

WhatsApp’s Response to the Court

A few days ago, WhatsApp informed the Supreme Court that it would comply by 16 March with the order requiring greater user control over data sharing.

In its affidavit, the company said:

"Sharing of user data collected on WhatsApp with other Meta companies or Meta company products for purposes other than for providing WhatsApp services shall not be made a condition for users to access WhatsApp service in India,"

"All future policy updates shall also comply with these requirements,"

It also clarified that it does not share user data with Meta for advertising purposes "except where a user chooses to use optional features", and that data will not be shared if those features are not used.

End-to-End Encryption Assurance

WhatsApp reiterated that personal messages remain protected by end-to-end encryption. The company emphasised that message content is not accessible for advertising or profiling purposes.

Consent-Based Framework

The Supreme Court has directed WhatsApp to implement a consent-based framework for data sharing. According to its affidavit, WhatsApp will:

• Notify users about data-sharing choices

• Allow opt-out options

• Introduce a prominent settings tab for reviewing or modifying preferences

WhatsApp’s Dominance in India

India is WhatsApp’s largest market globally, with about 853 million users, according to World Population Review.

While alternatives like Signal and Telegram exist — along with domestic platforms like Koo — none approach WhatsApp’s scale or network effects in the country.

Given this dominance, regulators argue that user “choice” may be theoretical rather than practical.

Broader Regulatory Context

India’s New Digital Data Protection Law

WhatsApp’s affidavit states it has begun preparations to comply with India’s new digital data protection law.

However, that law itself faces legal scrutiny. Petitioners have challenged it in the Supreme Court, claiming it violates rights to information and free speech and could enable surveillance. A five-judge bench is set to hear that case in March.

Big Tech Under Increased Scrutiny

In recent years, India’s federal government has tightened digital regulations, increased oversight of foreign tech platforms, and emphasised digital sovereignty and accountability.

The WhatsApp case may serve as a precedent for how dominant digital platforms operate in emerging markets.

Diverging Views on Monetisation

The debate extends beyond legality into the economics of digital platforms.

Digital rights activist Nikhil Pahwa argued:

"Advertising is a legitimate business model, and the Internet runs on billions of dollars of advertising,"

He also questioned the broader implications:

"If sharing data to enable better delivery of advertising on a firm's platforms is an abuse of dominance, then Gmail, Google Maps and Search should also be prevented from sharing data with Google's advertising business. Where will this end?"

Supporters of WhatsApp argue that users remain free to switch platforms. Critics counter that WhatsApp’s dominance makes meaningful switching difficult.

Key Issues at Stake

1. Privacy as a Fundamental Right

India’s Constitution recognises privacy as a fundamental right. The court’s stance suggests it will guard this principle strongly.

2. Abuse of Market Dominance

The CCI’s decision hinges on whether Meta leveraged WhatsApp’s dominance unfairly.

3. Informed Consent

The case may redefine what constitutes valid user consent in digital ecosystems.

4. Business Model of Big Tech

At a global level, the case touches on whether data-driven advertising models can operate without regulatory intervention in dominant platforms.

Conclusion

The legal challenge to WhatsApp’s 2021 privacy policy represents a defining moment in India’s digital governance journey. With 853 million users at stake, the case is about far more than a single app update — it addresses the balance between corporate power, consumer rights, and constitutional protections.

If the Supreme Court upholds strict consent standards and limits data-sharing practices, it could reshape how global technology companies operate in India and potentially influence regulatory approaches worldwide.

As the hearings continue, the decision is expected to have long-term implications for privacy law, competition regulation, and the future of digital business models in one of the world’s fastest-growing internet markets.