Scrutinizing WhatsApp's Data Sharing Policies in India

The Supreme Court’s observations highlight how the network effect transforms private digital platforms into quasi-essential infrastructure in India’s digital economy.

A network effect arises when the value of a service increases as more users join it. WhatsApp exemplifies this phenomenon in India, where it has become almost impossible to communicate, organise groups, or conduct small-scale business without being on the platform. Although alternative messaging apps such as Signal, Telegram, and Arattai exist, they lack the defining feature of WhatsApp—near-universal adoption. This dominance means that WhatsApp is not just another app, but a default communication layer embedded in everyday social and economic life.

The Supreme Court recognised that when such a platform imposes a “take-it-or-leave-it” ultimatum—accept data sharing with its parent company or stop using the service—it raises concerns that go beyond individual consent. In theory, users have a choice; in practice, opting out may lead to social and economic exclusion. This is why the Court questioned whether traditional notions of consent are meaningful in the presence of strong network effects.

From a policy perspective, this case underscores that platforms benefiting from massive network effects must be subject to higher regulatory scrutiny. Their decisions can reshape market competition, privacy norms, and citizen autonomy, making network effects a central concern in digital governance rather than a purely technical concept.

WhatsApp’s policy change intersects privacy and competition, but its most far-reaching implications lie in market power abuse.

While data sharing with Meta platforms such as Facebook and Instagram raises privacy questions, the Competition Commission of India (CCI) viewed the issue through the lens of dominance and unfair conditions. WhatsApp’s position in the messaging market allows it to impose terms that users cannot realistically refuse. When a dominant firm leverages its market position to extract additional data, it can distort competition by strengthening its parent company’s advertising and data analytics ecosystem.

This data integration enables Meta to gain an unfair advantage over rivals who lack access to comparable volumes of user data. Smaller messaging or advertising platforms cannot compete on equal terms when a single corporate group aggregates personal data across services. The ₹213.14 crore penalty imposed by the CCI reflects concerns that such practices entrench monopolistic advantages rather than promote innovation.

Globally, similar reasoning has been applied by regulators in the European Union, where competition authorities increasingly view data concentration as a source of market power. Thus, the WhatsApp case demonstrates why data governance and competition law must converge in the digital age, especially when dominant platforms blur the line between user consent and coercion.

WhatsApp’s dominance undermines the classical assumption that consent in digital markets is freely given and informed.

In conventional contract theory, users are presumed to have meaningful choice: they can accept terms or switch to alternatives. However, the Supreme Court noted that for a platform with near-universal reach, this assumption breaks down. For many Indians, WhatsApp is essential for family communication, workplace coordination, education groups, and local commerce. Rejecting its terms may therefore carry significant social and economic costs.

The 2021 policy update required users to either accept cross-platform data sharing or stop using the service. Although Meta argued that opting out was possible by leaving the platform, regulators viewed this as illusory choice. Behavioural economics also suggests that default options strongly influence user decisions, especially when opting out is inconvenient or socially costly.

This challenges policymakers to rethink consent standards in the digital economy. In markets characterised by strong network effects, regulators may need to move beyond consent-based remedies and impose structural obligations on dominant platforms to ensure fairness, transparency, and genuine choice.

The opt-out model appears consumer-friendly but is often ineffective when applied to dominant platforms like WhatsApp.

In theory, allowing users to opt out respects individual autonomy and avoids heavy-handed regulation. However, in practice, opt-out mechanisms place the burden on users rather than on firms that benefit from market dominance. When a platform is deeply embedded in social and economic life, opting out may result in isolation, loss of opportunities, or reduced access to essential communication networks.

Furthermore, opt-out choices are often obscured by complex interfaces and legal language, limiting informed decision-making. This is particularly problematic in India, where digital literacy levels vary widely. As a result, opt-out provisions may legitimise data extraction without truly protecting user interests.

A more effective approach may involve ex-ante obligations under a digital competition law, such as prohibiting forced data bundling or mandating data separation across services. Thus, while opt-outs may work in competitive markets, they are insufficient safeguards in ecosystems dominated by a few powerful digital gatekeepers.

International regulatory experiences demonstrate that unchecked digital dominance can undermine both competition and consumer welfare.

The European Union offers a prominent example through its actions against Big Tech firms. The EU’s antitrust cases against Google for search and Android dominance, and Meta for data integration across platforms, reflect a growing recognition that data concentration fuels market power. More recently, the Digital Markets Act (DMA) introduced ex-ante obligations for ‘gatekeepers’, restricting practices such as forced data combination and self-preferencing.

Similarly, Germany’s competition authority has taken proactive steps against Meta, arguing that combining data across services without genuine consent constitutes an abuse of dominance. These cases show that relying solely on post-facto penalties is often insufficient to alter firm behaviour.

For India, which is approaching one billion Internet users, these examples highlight the importance of timely regulatory intervention. Learning from global precedents can help India design a framework that balances innovation with competition and user rights.

A robust digital competition framework must combine competition law, data protection, and consumer welfare principles.

First, India should operationalise its proposed digital competition law with clear criteria for identifying ‘systemically important digital intermediaries’. Such platforms should face stricter obligations, including limits on cross-platform data sharing and requirements for transparency in policy changes. Second, regulators should move from reactive penalties to proactive oversight, preventing harmful practices before they distort markets.

Third, coordination between institutions is essential. The Competition Commission of India, data protection authorities, and sectoral regulators must share information and adopt a unified approach. For example, privacy violations that enhance market power should automatically trigger competition review.

Finally, user welfare must remain central. This includes ensuring real choice, promoting interoperability where feasible, and supporting smaller competitors. By embedding these principles, India can foster a healthy digital marketplace that encourages innovation while safeguarding competition, privacy, and democratic values.