Whatsapp Faces Second Largest Fine for Breaching GDPR Rules
Whatsapp Faces Second Largest Fine for Breaching GDPR Rules

Katarina Živković
Senior Associate

Miroslav Ravić
Trainee
On 2 September 2021 Ireland’s Data Protection Commission (DPC) announced a 225 million euro fine for WhatsApp and ordered the company to amend its practices within three months. It is the largest fine ever from the DPC, and the second-highest under Europe’s General Data Protection Regulation (GDPR).
The fine preceded the instruction to WhatsApp to make updates in its already massive privacy policy and change how it notifies users about sharing their data. This will bring the company into compliance with GDPR which governs how tech companies collect and use data in the EU area.
The mentioned fine relates to the investigation which began in 2018, about whether WhatsApp had been transparent enough concerning the provision of information and the transparency of that information to users of WhatsApp’s service. This also includes information provided to data subjects about the processing of information between WhatsApp and other Facebook Inc companies.
Following a comprehensive investigation, the Irish data authority submitted a draft decision to all concerned supervisory authorities under Article 60 of GDPR, in December 2020. In this regard, on 28 July 2021, the European Data Protection Board (EDPB) adopted a binding decision and this decision was notified to the DPC in Ireland. This decision contained instructions that required the DPC to reconsider and increase its proposed fine based on several factors contained in the EDPB’s decision. In assessing how the fine to be imposed against WhatsApp should be calculated, the EDPB ordered the DPC to factor in the turnover of all the component companies falling under the umbrella of Facebook Inc, WhatsApp’s parent company. It also clarified that the total turnover of a company is a factor that can be considered for ensuring the actual level of penalty decided upon is “effective, proportionate and dissuasive”, as the regulation requires, and is not just relevant for determining what the maximum possible penalty that can be imposed under the GDPR is. Following the decision of EDPB, the DPC found that WhatsApp failed to disclose information under its GDPR transparency obligations and imposed a fine of 225 million euros.
In a statement by which WhatsApp representative responded to the DPC’s decision, WhatsApp denied all stated in a decision and also announced that the company will appeal the decision.
The mentioned decision that arose from the Ireland Data Protection authority shows how great consequences could be in case of GDPR infringement, and sends a strong message to all companies stated in the EU area to comply with its rules.
This text is for informational purposes only and should not be considered legal advice. Should you require any additional information, feel free to contact us.
Contact:
Katarina Živković, Senior Associate
katarina.zivkovic@sog.rs
Miroslav Ravić, Trainee
miroslav.ravic@sog.rs
OTHER NEWS
We are Hiring!
We are looking to expand our Belgrade team with a Legal Trainee. Skills and Experience Required: University degree in Law; Excellent spoken and written English, knowledge of other languages would be considered an advantage; Outstanding interpersonal...
Women’s Representation and Participation in the Modern Business World – the Example of the Republic of Serbia
The participation of women in business is not only a matter of gender equality and social justice but is also a crucial prerequisite for sustainable economic growth and social progress, particularly in the face of the multiple challenges that humanity is...
Mandatory Submission of the Incorporation Application in Electronic Form for the Companies
The Ministry of Commerce of the Republic of Serbia has announced that the applications regarding the incorporation of companies (among others, limited liability companies and joint stock companies) can be submitted only in electronic form as of 18 May 2023 via...
Let's connect
Let us know how we can help you and your business.