WhatsApp — Policy Change

Executive Summary

WhatsApp updated its EEA privacy policy to set 'legitimate interest' as the legal basis for data processing, following the January 2023 DPC ruling that found the previous 'contract' basis invalid. Under the new framework, users gained the right to object to their data being used under legitimate interest, marking a shift in how WhatsApp justifies its data processing in Europe.