Government & Policy

WhatsApp agrees to clean up its user messaging in the EU

Comment

WhatsApp icon on a phone screen
Image Credits: Thomas Trutschel (opens in a new window) / Getty Images

It’s taken rather longer than a month for Meta-owned WhatsApp to commit to address complaints swirling around how it imposes terms of service on users but the European Commission has just announced that the messaging platform has agreed to improve how it communicates to users and presents future ToS updates.

Early in 2021, WhatsApp triggered a major user backlash after it pushed out an aggressive and confusingly worded update to its ToS that required users to accept the update in order to continue using the platform without making it clear what exactly was changing. The episode caused widespread confusion and drove some users to ditch the platform altogether — with rivals like Signal and Telegram reporting a surge in adoption.

In July 2021 the European consumer protection association umbrella group, the BEUC, along with eight of its member organizations, lodged a complaint about WhatsApps’ confusing ToS with the EU’s executive, the Commission, and with the European network of consumer authorities. This led on to warnings from the bloc to WhatsApp that it needed to fix a variety of issues — including a letter last summer when the Commission gave the end-to-end encrypted (E2EE) messaging platform a month to straighten out its messaging to users.

At the same time, the Commission asked WhatsApp to confirm whether or not it derives any revenue from commercial policies related to user data.

WhatsApp slapped for processing data without a lawful basis under EU’s GDPR

While message content on WhatsApp is E2EE, user metadata is not protected so it has remained unclear how Meta might use this information, given an earlier decision the tech giant took — in August 2016 — abandoning a privacy pledge by the WhatsApp founders by saying it would link their accounts to others on public social services it operates, such as Facebook, potentially giving the adtech giant the ability to enhance its profiling of WhatsApp users by cross-linking their digital activity with other social services it owns.

Today, the Commission said WhatsApp has confirmed that users’ personal data is not shared with third-parties or other Meta companies — including Facebook — for advertising purposes. Although it is unclear whether the EU is simply taking Meta at its word on this — and whether or not it intends to audit the claim; we’ve asked if it will be taking any follow on steps and will update this report with any response.

Update: The Commission has confirmed it will not be auditing WhatsApp’s claims — a spokeswoman told us it is for competent data protection authorities to assess whether the platform’s processing of user data is in-line with EU law:

According to EU consumer law, consumers have to be well informed upfront on how a company might use their personal data, and in particular whether users’ data is shared with other companies for commercial purposes, such as targeted advertising.

WhatsApp confirmed that it does not share users’ personal data with third-parties and other Meta companies, including Facebook. It would be for the competent data protection authorities to assess whether WhatsApp’s processing of personal data is in line with data protection legislation.

The question of whether WhatsApp uses user data for marketing was an issue that Ireland’s Data Protection Commission declined to look into, after it announced its final decision this January on a separate, multi-year data protection-related investigation of the platform, despite the European Data Protection Board instructing it to do so. So this aspect of WhatsApp’s operation remains under-scrutinized by regulators.

“In June 2022, the CPC Network sent a second letter to WhatsApp reiterating their request that consumers must be clearly informed about WhatsApp’s business model and, in particular, whether WhatsApp derives revenues from commercial policies relating to users’ personal data. Following discussions among the CPC Network, the Commission and WhatsApp, the company confirmed that it does not share users’ personal data for advertising purposes,” the Commission said in its press release today.

“Following a dialogue with EU consumer protection authorities and the European Commission (CPC network), WhatsApp committed to being more transparent on changes to its terms of service. Moreover, the company will make it easier for users to reject updates when they disagree with them, and will clearly explain when such rejection leads the user to no longer be able to use WhatsApp’s services,” the EU’s executive added.

Commenting in a statement, the EU’s justice commissioner, Didier Reynders, also said: I welcome WhatsApp’s commitments to changing its practices to comply with EU rules, actively informing users of any changes to their contract, and respecting their choices instead of asking them each time they open the app. Consumers have a right to understand what they agree to and what that choice entails concretely, so that they can decide whether they want to continue using the platform.

In an overview of the commitments made by WhatsApp, the EU said that — for any future policy updates — the messaging platform will:

  • explain what changes it intends to make to the users’ contracts and how they could affect their rights;
  • include the possibility to reject updated terms of service as prominently as the possibility to accept them;
  • ensure that the notifications informing about the updates can be dismissed or the review of the updates can be delayed, as well as respect users’ choices and refrain from sending recurring notifications.

So the EU appears to have extracted a commitment from Meta not to resort to any more dark pattern designs to try to force WhatsApp users to swallow self-serving ToS updates — such as the deceptive choices it pushed out, back in 2016, when it tried to force WhatsApp users to agree to share their mobile phone number and last seen status on the app with the parent company (what was then known as Facebook and is now called Meta) and with any other companies it owned.

Of course the devil will be in the detail of how Meta interprets these ToS commitments — and how effectively the bloc’s regulators (which could include the Commission itself) monitor its design choices and enforce against any breaches.

That said, Meta has more reason not to ignore rules in this area than previously.

First up, a 2019 modernization of EU consumer protection law, which began to apply last May, brought in more dissuasive penalties — especially for widespread infringement issues which cut across borders and affect many EU consumers — allowing national authorities to issue fines of at least up to 4% of global annual turnover for confirmed breaches.

Additionally, the EU’s Digital Services Act (DSA) — which is set to apply for a subset of larger platforms (most likely including Meta) later this year — foresees what the Commission describes as “an obligation for services to have clear terms and conditions, explaining to the user in comprehensible language when their content or their account can be affected by certain restrictions, and an obligation to apply such restrictions in a diligent, objective and proportionate manner”.

Penalties for infringements of the DSA can be as high as 6% of global annual turnover — and, for larger platforms, aka VLOPs, the Commission itself will take on a centralized oversight and enforcement role. So the days of multi-year ‘dialogues’ that let tech giants kick the can down the road for ages before — eventually — offering up some incremental correction or tidbit of information should be on the way out in the EU.

We contacted WhatsApp about today’s announcement but a spokesperson told us it is not commenting.

We understand BEUC will be publishing a response later today.

Update: BEUC has described the outcome of the long-running investigation into its complaints as “weak” and a disappointment for consumers.

In a statement its director General, Ursula Pachl, said:

“WhatsApp bombarded users for months with aggressive and persistent pop-up messages to force them to accept its new terms of use and privacy policy. They told users that their access to their app would be cut off if they did not accept the new terms.

“Our complaint into the company has now been closed after more than one and a half years but the outcome is disappointing. More transparency and easy options to reject policy changes in the future are simply not enough. This will not offer a remedy to the millions of WhatsApp users who were forced to accept the changes due to the aggressive behaviour of the company back in 2021. Unfortunately, with this weak reaction, consumer authorities are sending a very worrying signal accepting that a tech giant like WhatsApp can breach consumer rights and then get away with just a promise to do better in the future. This illustrates the lack of deterrence from the current way to enforce consumer law and the need for an urgent reform to ensure more effective enforcement particularly in cases of EU-wide infringements.”

Europe seals a deal on tighter rules for digital services

WhatsApp given a month to fix consumer ToS concerns in Europe

Controversial WhatsApp policy change hit with consumer law complaint in Europe

More TechCrunch

Featured Article

In 2024, many Y Combinator startups only want tiny seed rounds — but there’s a catch

When Bowery Capital general partner Loren Straub started talking to a startup from the latest Y Combinator accelerator batch a few months ago, she thought it was strange that the company didn’t have a lead investor for the round it was raising. Even stranger, the founders didn’t seem to be…

6 seconds ago
In 2024, many Y Combinator startups only want tiny seed rounds — but there’s a catch

Welcome to Startups Weekly — Haje’s weekly recap of everything you can’t miss from the world of startups. Anna will be covering for him this week. Sign up here to…

Startups Weekly: Ups, downs, and silver linings

Apple is set to board the runaway locomotive that is generative AI at next week’s World Wide Developer Conference. Reports thus far have pointed to a partnership with OpenAI that…

Apple’s generative AI offering might not work with the standard iPhone 15

LinkedIn has confirmed it will no longer allow advertisers to target users based on data gleaned from their participation in LinkedIn Groups. The move comes more than three months after…

LinkedIn to limit targeted ads in EU after complaint over sensitive data use

Founders: Need plans this weekend? What better way to spend your time than applying to this year’s Startup Battlefield 200 at TechCrunch Disrupt. With Monday’s deadline looming, this is a…

Startup Battlefield 200 applications due Monday

The company is in the process of building a gigawatt-scale factory in Kentucky to produce its nickel-hydrogen batteries.

Novel battery manufacturer EnerVenue is raising $515M, per filing

Meta is quietly rolling out a new “Communities” feature on Messenger, the company confirmed to TechCrunch. The feature is designed to help organizations, schools and other private groups communicate in…

Meta quietly rolls out Communities on Messenger

Featured Article

Siri and Google Assistant look to generative AI for a new lease on life

Voice assistants in general are having an existential moment, and generative AI is poised to be the logical successor.

7 hours ago
Siri and Google Assistant look to generative AI for a new lease on life

Education software provider PowerSchool is being taken private by investment firm Bain Capital in a $5.6 billion deal.

Bain to take K-12 education software provider PowerSchool private in $5.6B deal

Shopify has acquired Threads.com, the Sequoia-backed Slack alternative, Threads said on its website. The companies didn’t disclose the terms of the deal but said that the Threads.com team will join…

Shopify acquires Threads (no, not that one)

Featured Article

Bangladeshi police agents accused of selling citizens’ personal information on Telegram

Two senior police officials in Bangladesh are accused of collecting and selling citizens’ personal information to criminals on Telegram.

17 hours ago
Bangladeshi police agents accused of selling citizens’ personal information on Telegram

Carta, a once-high-flying Silicon Valley startup that loudly backed away from one of its businesses earlier this year, is working on a secondary sale that would value the company at…

Carta’s valuation to be cut by $6.5 billion in upcoming secondary sale

Boeing’s Starliner spacecraft has successfully delivered two astronauts to the International Space Station, a key milestone in the aerospace giant’s quest to certify the capsule for regular crewed missions.  Starliner…

Boeing’s Starliner overcomes leaks and engine trouble to dock with ‘the big city in the sky’

Rivian needs to sell its new revamped vehicles at a profit in order to sustain itself long enough to get to the cheaper mass market R2 SUV on the road.

Rivian’s path to survival is now remarkably clear

Featured Article

What to expect from WWDC 2024: iOS 18, macOS 15 and so much AI

Apple is hoping to make WWDC 2024 memorable as it finally spells out its generative AI plans.

24 hours ago
What to expect from WWDC 2024: iOS 18, macOS 15 and so much AI

HSBC and BlackRock estimate that the Indian edtech giant Byju’s, once valued at $22 billion, is now worth nothing.

BlackRock has slashed the value of stake in Byju’s, once worth $22 billion, to zero

As WWDC 2024 nears, all sorts of rumors and leaks have emerged about what iOS 18 and its AI-powered apps and features have in store.

What to expect from Apple’s AI-powered iOS 18 at WWDC 2024

Apple’s annual list of what it considers the best and most innovative software available on its platform is turning its attention to the little guy.

Apple’s Design Awards highlight indies and startups

Meta launched its Meta Verified program today along with other features, such as the ability to call large businesses and custom messages.

Meta rolls out Meta Verified for WhatsApp Business users in Brazil, India, Indonesia and Colombia

Last year, during the Q3 2023 earnings call, Mark Zuckerberg talked about leveraging AI to have business accounts respond to customers for purchase and support queries. Today, Meta announced AI-powered…

Meta adds AI-powered features to WhatsApp Business app

TikTok is testing streaks that are similar to Snapchat’s in order to boost engagement, including how long people stay on the app.

TikTok is testing Snapchat-like streaks

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. Sign up here for free — just click TechCrunch Mobility! Your usual…

Inside Fisker’s collapse and robotaxis come to more US cities

New York-based Revel has made a lot of pivots since initially launching in 2018 as a dockless e-moped sharing service. The BlackRock-backed startup briefly stepped into the e-bike subscription business.…

Revel to lay off 1,000 staff ride-hail drivers, saying they’d rather be contractors anyway

Google says apps offering AI features will have to prevent the generation of restricted content.

Google Play cracks down on AI apps after circulation of apps for making deepfake nudes

The British retailers association also takes aim at Amazon’s “Buy Box,” claiming that Amazon manipulated which retailers were selected for the coveted placement.

Amazon slammed with £1.1B data abuse lawsuit from UK retailers

Featured Article

Rivian overhauled the R1S and R1T to entice new buyers ahead of cheaper R2 launch

Rivian has changed 600 parts on its R1S SUV and R1T pickup truck in a bid to drive down manufacturing costs, while improving performance of its flagship vehicles.  The end goal, which will play out over the coming year, is an existential one. Rivian lost about $38,784 on every vehicle…

1 day ago
Rivian overhauled the R1S and R1T to entice new buyers ahead of cheaper R2 launch

Twitch has come up with a solution for the ongoing copyright issues that DJs encounter on the platform. The company announced Thursday a new program that enables DJs to stream…

Twitch DJs will now have to pay music labels to play songs in livestreams

Google said today it is partnering with RapidSOS, a platform for emergency first responders, to enable users to contact 911 through RCS (Rich Messaging Service).

Google partners with RapidSOS to enable 911 contact through RCS

Long before product-led growth became a buzzword, Atlassian offered free tiers for virtually all of its productivity and developer tools. Today, that mostly means free access for up to 10…

Atlassian now gives startups a year of free access

Featured Article

A social app for creatives, Cara grew from 40k to 650k users in a week because artists are fed up with Meta’s AI policies

Artists have finally had enough with Meta’s predatory AI policies, but Meta’s loss is Cara’s gain. An artist-run, anti-AI social platform, Cara has grown from 40,000 to 650,000 users within the last week, catapulting it to the top of the App Store charts. Instagram is a necessity for many artists,…

1 day ago
A social app for creatives, Cara grew from 40k to 650k users in a week because artists are fed up with Meta’s AI policies