WhatsApp — Enforcement
majorAnti-Privacy → Enforcement
Executive Summary
The Irish DPC fined WhatsApp an additional 5.5 million euros for GDPR breaches related to its legal basis for data processing. The European Data Protection Board overruled the DPC's initial finding, determining that WhatsApp could not rely on 'contract' as a legal basis for processing personal data for service improvement and security purposes. WhatsApp was ordered to achieve compliance within 6 months.