The Centre argued that WhatsApp’s new policy violated the Information Technology Rules, 2011, in five ways. “It fails to specify the types of personal data being collected,” the government said. “It fails to notify user details of collection of sensitive personal information, provide an option to review or amend information, provide an option to withdraw consent retrospectively and guarantee further non-disclosure by third parties.”
The petitioners expressed concern that the data of the users could be used by Facebook-owned companies as well as third parties for business purposes.
The petitioners had also submitted that the Personal Data Protection Bill recognised the right to access and the right to objection, restriction and portability of data, which must be put into effect by the court and the Centre, according to Live Law.
“In the coming weeks, we will display a banner in WhatsApp providing more information that people can read at their own pace,” the messaging platform had said in a blog post. “We have also included more information to try and address concerns we’re hearing. Eventually, we will start reminding people to review and accept these updates to keep using WhatsApp.” The company said that it was committed to the protection of its users’ privacy.
On February 15, the Supreme Court had directed WhatsApp to give an undertaking that private data of users was not being shared with a third party. The court told the messaging platform that people valued their privacy more than money.