WhatsApp Privacy Policy Case: Overlap in Data Privacy–Competition Issues Doesn't Curb CCI's Powers, says NCLAT
Pranav B Prem
The National Company Law Appellate Tribunal (NCLAT) at New Delhi has reaffirmed that the overlap between privacy and competition law concerns does not restrict the powers of the Competition Commission of India (CCI) from investigating anti-competitive conduct. In a significant decision, the tribunal upheld the Rs. 213.14 crore penalty imposed by the CCI on Meta Platforms Inc. and WhatsApp LLC for abusing their dominant position in India’s Over-The-Top (OTT) messaging market through coercive data-sharing practices.
Delivering its judgment in Competition Appeal No. 1 & 2 of 2025, a Bench comprising Chairperson Justice Ashok Bhushan and Technical Member Arun Baroka held that while privacy and competition laws may intersect, they serve complementary purposes. “Competition law and data protection law operate as complementary, not exclusive frameworks,” the tribunal observed, emphasizing that the mere existence of overlap cannot exclude the jurisdiction of the CCI to inquire into competition harms even when privacy issues are involved.
Background of the Case
The case arose from the 2021 update to WhatsApp’s Terms of Service and Privacy Policy, which expanded the scope of data collection and sharing with other Meta entities. The CCI, acting suo motu, found that WhatsApp had abused its dominance in the market for “OTT messaging apps through smartphones in India” by compelling users to accept the 2021 update as a precondition for continued use of the service. It further held that WhatsApp and Meta leveraged user data obtained through WhatsApp to strengthen Meta’s position in the “online display advertising market in India,” thereby contravening provisions of Section 4(2)(a)(i), 4(2)(c), and 4(2)(e) of the Competition Act, 2002. Consequently, in its order dated November 18, 2024, the CCI imposed a monetary penalty of Rs. 213.14 crore on Meta and directed several remedial measures, including a five-year ban on sharing WhatsApp user data with Meta companies for advertising purposes.
Arguments before the Tribunal
WhatsApp and Meta challenged the CCI’s order, contending that the issues raised were primarily concerned with privacy and data protection and thus fell under the purview of the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules). They argued that the CCI lacked jurisdiction to investigate privacy-related matters and that its order was ultra vires.
The appellants further submitted that the CCI had ventured beyond its mandate by evaluating the adequacy of user consent and data protection standards—issues already pending consideration before the Supreme Court in Karmanya Singh Sareen v. Union of India and before other regulatory bodies. They asserted that such matters were distinct from competition law, which deals with market structure and consumer harm, not individual privacy.
On the other hand, the CCI argued that while privacy laws regulate how personal data is collected, processed, and shared, competition law examines whether a dominant entity’s data practices distort markets or reduce consumer choice. It maintained that misuse of data to strengthen market dominance constitutes an anti-competitive act, even if it also implicates privacy considerations. According to the CCI, the DPDP Act and competition law operate in separate but complementary spheres, and their coexistence does not negate each other’s jurisdiction.
Tribunal’s Findings
The NCLAT upheld the CCI’s position, holding that privacy concerns do not preclude competition scrutiny when dominant firms exploit their market power through data practices that limit consumer autonomy. It reasoned that while data protection laws focus on ensuring consent and safeguarding personal data, competition law addresses whether data usage by a dominant enterprise results in market distortion or consumer exploitation. Referring to the Supreme Court’s 2022 decision dismissing Meta’s challenge to the CCI’s suo motu investigation, the tribunal reiterated that “the Commission should not be restrained from proceeding further with the enquiry or investigation for the alleged violation of the Competition Act.”
The Bench observed: “Competition law and data protection law operate as complementary, not exclusive, frameworks. Both may apply simultaneously since they answer different questions—privacy law asks whether consent was valid, while competition law asks whether market power was abused through coercive or anti-competitive data practices.”
The tribunal also addressed the appellants’ reliance on the earlier Vinod Kumar Gupta v. WhatsApp Inc. decision, in which the CCI had declined to find a prima facie case of abuse concerning WhatsApp’s 2016 privacy update. The NCLAT clarified that the 2021 policy was materially different in scope and impact, as it involved broader data-sharing without opt-out mechanisms, justifying fresh investigation and penalty. Importantly, the Bench recognized that privacy has evolved into a “non-price parameter of competition”, observing that data collection and user control directly affect the quality of digital services. “Reduction of privacy as a non-price factor in competition at par with other non-price attributes would be fully in consonance with the letter and spirit of the Competition Act. Privacy loss can be considered a reduction in service quality, and excessive data collection amounts to degradation of service quality,” the tribunal stated.
Modifications to the CCI Order
While the NCLAT largely upheld the CCI’s findings, it made certain modifications. It set aside the five-year blanket ban on sharing WhatsApp user data with Meta companies for advertising, holding that such a restriction lacked a proper rationale and exceeded the scope of proportional remedy. The tribunal observed that the CCI had failed to justify the duration or necessity of the five-year prohibition, particularly when users were now given an option to opt in or opt out of data sharing.
The NCLAT also examined the CCI’s application of Section 4(2)(e) of the Competition Act, which pertains to leveraging dominance in one market to protect another. It found that Meta and WhatsApp, being distinct legal entities, could not be treated as a single enterprise for the purposes of Section 4(2)(e), and hence, that particular finding was unsustainable.
Nevertheless, the tribunal affirmed the findings of abuse under Sections 4(2)(a)(i) (imposing unfair conditions) and 4(2)(c) (denial of market access), noting that WhatsApp’s 2021 policy effectively coerced users to agree to extensive data-sharing conditions, leaving them with no realistic alternative in the market for messaging apps.
The NCLAT partly allowed the appeals filed by WhatsApp and Meta. It upheld the penalty of Rs. 213.14 crore and the directions ensuring user autonomy and informed consent, such as the requirement for clear explanations of data-sharing purposes, the inclusion of an opt-out mechanism, and compliance obligations for future updates. However, it struck down the CCI’s five-year ban on sharing data for advertising purposes and set aside the finding under Section 4(2)(e). “We note that this remedy is contestable as the rationale for the duration of five years’ ban was missing altogether in the impugned order. The justification that such a period would revive competitive conditions cannot meet the threshold required by law,” the Bench remarked.
Appearance
For Appellant: Mr. Mukul Rohatgi and Mr. Arun Kathpalia, Sr. Advocates with Mr. Yaman Verma, Mr. Shashank Mishra, Ms. Aisha Khan, Mr. Shivek Endlaw, Mr. Parv Kaushik, Mr. Aditya Dhupar, Ms. Vedika Rathore, Ms. Devanshi Singh, Mr. Udit Dedhiya, Ms. Bani Brar and Ms. Tahira Kathpalia, Advocates.
For Respondent: Mr. Balbir Singh, Sr. Advocate with Mr. Samar Bansal, Mr. Manu Chaturvedi, Ms. Bhivali Shah, Mr. Vedant Kapur, Ms. Devika Singh Roy Chowdhary, Mr. Ahmed Jamal Siddiqui, Mr. Competition Appeal No. 1 & 2 of 2025 2 of 184 Abhishek Gandhi, Mr. Kshitiz Kishor Rai, Ms. Sonia Dutta, Dir. Law, Mr. Dinesh Chandra, Deputy Dir. Law, Mr. Saurabh, Joint Dir., Advocates for R1/CCI. Mr. Kapil Sibbal and Mr. Amit Sibal Sr. Advocates with Mr. Naval Chopra, Ms. Supritha Prodaturi, Ms. Akshi Rastogi, Ms. Parinita Kare, Mr. Aatmik Jain, Ms. Ritika Bansal, Ms. Anupma Reddy Eleti, Ms. Aparajita Jamwal and Mr. Saksham Dhingra, Advocates for R-4. Mr. Abir Roy, Mr. Vivek Pandey, Mr. Aman Shankar, Sasthibrata Panda, Biyanka Bhatia and Ms. Shreya Kapoor, Advocates for R-3.
Cause Title: WhatsApp LLC v CCI
Case No: Competition Appeal No. 1 of 2025
Coram: Chairperson Justice Ashok Bhushan, Technical Member Arun Baroka
