Following a provisional measure taken by the Hamburg DPA against WhatsApp, and analyzing WhatsApp’s data sharing practices with Facebook, the EDPB determined that “the high likelihood of infringements and the lack of information” justifies the decision to request the for the Irish DPA to carry out a statutory investigation relating to WhatsApp’s data processing, including:
- whether data is actually shared with Facebook
- whether Facebook acts as processor or joint controller, and
- whether the legal basis identified in the privacy policy is adequate in relation to the actual processing.
Read the Decision here
