A landmark legal battle over privacy, data control and the business model of big tech is playing out in India as WhatsApp’s 2021 privacy policy faces close scrutiny from the country’s top court.
At stake is not just WhatsApp’s policy, but broader questions over privacy rights, consumer choice and regulation of dominant online platforms. WhatsApp is India’s most popular messaging app.
A few days ago, WhatsApp told the Supreme Court it would comply by 16 March with an order requiring it to give Indian users greater control over how their data is shared with its parent company, Meta.
In an affidavit, seen by the BBC, the messaging platform added that users could continue using the app even if they opted out of sharing data with Meta for advertising.
The move comes days after the court criticised WhatsApp’s 2021 privacy policy, warning that it would not allow WhatsApp or Meta to “play with” Indians’ right to privacy or “make a mockery” of the Constitution, which guarantees privacy as a fundamental right.
The remarks were made during open court hearings on WhatsApp’s January 2021 policy update, which required users to share data with Meta companies to keep using the app – a “take it or leave it” approach that India’s competition watchdog, the Competition Commission of India (CCI), said left users with “no real choice”.
The update drew criticism from users who said they felt compelled to accept terms they were uncomfortable with, noting it differed from the 2016 policy, which had allowed existing users to opt out of sharing data with Meta for advertising.
The policy has also been criticised by digital rights activists as invasive and a violation of user autonomy, while others argue that leveraging a platform’s popularity for advertising is common practice in the internet age.
WhatsApp is ubiquitous in India with about 853 million users, according to World Population Review. Rivals such as Signal, Telegram and homegrown platforms like Koo exist, but none match in popularity.
Given its vast reach, WhatsApp and its parent company are among the global tech firms closely watched by India’s federal government which has, in recent years, tightened digital regulations and pushed platforms for greater accountability.
A legal battle over WhatsApp’s privacy policy began in March 2021 when the CCI ordered an investigation, alleging that Meta was engaging in “exploitative and exclusionary conduct”. It said forcing users to share data with Meta companies allowed the firm to leverage WhatsApp’s dominance in India to deny advertising access to rivals.
In November 2024, the CCI fined Meta $25m for “abusing its dominant position” and ordered it and WhatsApp to implement behavioural remedies within three months. It barred WhatsApp from sharing user data with Meta entities for five years and directed the company to clearly specify the purposes of data sharing in its privacy policy.
WhatsApp and Meta challenged the order before a company law tribunal, which upheld the penalty but stayed the five-year data-sharing ban. In January 2026, the firms moved the Supreme Court to contest the fine.
While hearing the case earlier this month, the Supreme Court criticised WhatsApp’s “take it or leave it policy”, saying that it was a way of “committing theft of private information”.
The court also voiced concern over personal communications being used for targeted advertising and directed WhatsApp to establish a consent-based framework for data sharing.
In an affidavit to the Supreme Court, WhatsApp reiterated that personal messages are protected by end-to-end encryption and said it would implement the CCI’s data-sharing remedies, which aim to give users greater control over their data.
The app said it would notify users to allow them to opt out of data sharing and enable them to review or modify their choices through a prominent tab in the app’s settings.
“Sharing of user data collected on WhatsApp with other Meta companies or Meta company products for purposes other than for providing WhatsApp services shall not be made a condition for users to access WhatsApp service in India,” the affidavit said.
“All future policy updates shall also comply with these requirements,” it added.
It also said WhatsApp does not share user data with Meta for advertising purposes “except where a user chooses to use optional features”, and that data will not be shared if those features are not used.
According to the affidavit, WhatsApp has already started preparing plans to comply with India’s new digital data protection law.
The law has been challenged in the Supreme Court by petitioners who argue it violates the rights to information and free speech and could be misused for surveillance. A five-judge bench is set to hear the case in March.
The Supreme Court has not yet ruled on the penalty against Meta and the case is still being heard in court.
Some users and rights activists have welcomed the move, arguing that big tech companies should not exploit large developing markets solely for profit. Others, including digital rights activist Nikhil Pahwa, say Meta and WhatsApp, as commercial entities, have a legitimate right to monetise user metadata.
