WhatsApp Ireland Ltd, a subsidiary of Meta, has taken its legal dispute over a €225 million fine to the Court of Justice of the European Union (CJEU), the EU’s highest court. This appeal follows the rejection of the company’s challenge by the General Court of the CJEU in 2022. The fine was initially imposed by the Irish Data Protection Commission (DPC) following an inquiry into possible breaches of the General Data Protection Regulation (GDPR).
The controversy stems from a previous probe by the DPC, which alleged that WhatsApp did not adequately disclose data sharing practices with its parent company Facebook. Following this, the European Data Protection Board (EDPB) intervened, requiring WhatsApp to pay the augmented fine and rectify its GDPR compliance issues. The EDPB administered a binding decision necessitating WhatsApp to cease infringing certain data privacy obligations within three months.
The General Court previously determined that WhatsApp’s legal position lacked the necessary locus standi as the decision directly targeted the Irish national data protection authority rather than the company. Consequently, the court suggested that WhatsApp pursue legal avenues in Ireland, challenging any enforcement action directed specifically at it in the Irish courts.
This development occurs amid broader tensions between Meta and several European regulatory bodies over data protection and privacy issues. As recently as May 2024, Meta faced a record €1.2 billion fine by Irish regulators. Moreover, the legal climate in Europe continues to evolve, with rulings like Germany’s highest court affirming the right of individuals to claim damages against Facebook over previous data privacy breaches.
As the case unfolds, legal professionals and corporate entities will closely monitor the proceedings for any implications or guidance on data protection compliance and enforcement within the EU framework.
For an in-depth look at the ongoing legal proceedings, visit the original article on JURIST.