Halt WhatsApp data transfers, German privacy watchdog tells Facebook

Facebook does not have permission from WhatsApp 35 million German users to transfer their data, said Hamburg's Data Protection Commissioner

Facebook must stop collecting information about WhatsApp users in Germany, a local privacy watchdog has ordered.

Last month, Facebook began combining user data from WhatsApp, the messaging company it acquired in 2014, with the mountain of information it holds about members of its social network in order to better target advertising.

The move prompted concern among WhatsApp users, as the company had long promoted itself as a strong protector of user privacy.

Privacy regulators were also concerned, among them the Hamburg Commissioner for Data Protection and Freedom of Information, who on Tuesday issued an administrative order prohibiting Facebook from collecting and storing the data of German WhatsApp users. The company must also delete any data that WhatsApp has already handed over.

WhatsApp still operates independently from Facebook and the two companies have separate user agreements and data privacy policies. They have also, in the two years since Facebook acquired WhatsApp, assured their users that there would be no sharing of data, Commissioner Johannes Caspar said.
The sharing of data between the two companies is an infringement of German data protection law because Facebook has not obtained effective approval from WhatsApp users for the transfer, and there is no legal basis for it to receive the data, according to the Commissioner.

"It has to be their decision whether they want to connect their account with Facebook," he said. "Facebook has to ask for their permission in advance. This has not happened."

There are around 35 million WhatsApp users in Germany, but millions more are indirectly affected, he said. These are people whose contact details were uploaded to WhatsApp from users' address books, even though they may have no connection with WhatsApp or Facebook themselves.

Facebook told the Commissioner it had not yet collected all this information from WhatsApp. This, he said, is cause for concern because it can only make the impact of the data protection breach more severe when the transfer does happen.

A recent ruling from the Court of Justice of the European Union confirmed that national data protection laws apply if a company processes data in connection with a national subsidiary. Facebook does so through a subsidiary in Hamburg responsible for marketing in German-speaking regions, the Commissioner said.
That's a key detail in this case, as Facebook otherwise claims that its relations with all users outside North America are handled by its Irish subsidiary, and thus subject to Irish, not German, data protection law.

It was that claim by Facebook that led Austrian Max Schrems to file a complaint with the Irish Data Protection Commissioner -- a complaint that ultimately found its way to the CJEU and led to the invalidation of the Safe Harbor transatlantic data transfer agreement.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags privacyFacebook

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Peter Sayer

Peter Sayer

IDG News Service
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?