Andrew Bonwick
Vice President of Product Development at Relm Insurance
Madhav Sheth
CEO of Ai+ Smartphone
Stephen Rose
CEO Render Networks

Following the large-scale data leak scandal by Cambridge Analytica and Facebook, its companies like WhatsApp are also being dragged into the limelight and are being questioned on their data sharing policies. However, WhatsApp has come clean about its strategies regarding sharing of data and also updated its policies ahead of the GDPR (General Data Protection Regulation) in European Union, which comes in effect starting May 25. WhatsApp clarified that the messaging platform did not record and sell data to advertisers and also ensured general public that its messages were end-to-end encrypted meaning that no one in the company could read the messages either. WhatsApp however, did say that it would share the metadata of the messages, i.e. data like user’s account number, the timestamp of messages etc. with its parent company Facebook. This is the issue that raised concerns in the minds of users.

The new update to the privacy policy also outlines that the entry barrier on age for using WhatsApp will be raised from 13 years to 16 years in the European Union. The messaging service has put a hold on the data sharing for EU users under a privacy policy update. Criticising the update, the EU data protection authorities (or Article 29 Working Party) noted that the changes were “seriously deficient as a means to inform their consent”. The Article 29 Working Party highlighted that the issue of getting user concern over data sharing has still not been resolved by WhatsApp because although WhatsApp has put a hold on data sharing, for now, it hasn’t promised that it won’t do so in the future.
It is also important for the users to know the reason for all the policy updates that WhatsApp is making. Primarily, the main reason for WhatsApp to do so is the General Data Protection Regulation Law which is being passed in the European Union. This new law strictly outlines the guidelines for tech companies about how users’ data is shared online. There have stringent rules laid down by the government which ask the tech companies to define clearly what falls under the definition of personal data. Also, these tech companies will be required to inform the users about the data breach, if it happens, under 72 hours. Any delay in the same would mean action against the tech giants. This new policy has also forced WhatsApp to launch a new feature whereby users will be able to download their data from WhatsApp’s website. Also, Parental consent will be mandatory for the companies to process personal data of children who are under the age of 16.