Pending
    Case-Number
  • SLP (C) 804/2017
  • Case Description

    This case concerns the privacy policy of WhatsApp which is an internet messaging service. The privacy policy permits WhatsApp to share data with Facebook and all its group companies for the purposes of commercial advertising and marketing. The privacy policy has been challenged as being violative of the right to privacy. 

    Background

    Karmanya Singh and Shreya Sethi filed a Special Leave Petition (SLP) in the Supreme Court challenging the 2016 privacy policy of WhatsApp. They voiced an urgent need to protect the data of Indians who use internet messaging applications such as Whatsapp. They argued that, by sharing private data of its users with Facebook and all its group companies, WhatsApp threatens the right to privacy of its users.

     

    In 2014, WhatsApp was bought by Facebook. Whatsapp acknowledged that their privacy policy will not change. Yet, in August 2016, Whatsapp announced a change in their privacy policy. The new policy says that account information of users including users' phone number and contact details. The new policy would come into effect after September 25, 2016. This was when Karmanya Singh and Shreya Sethi decided to challenge the privacy policy in the Delhi High Court.

     

    On 23rd September 2016, a Divisional bench of the Delhi High Court rejected the petition. The Court, however, directed WhatsApp to delete the data, until 25th September 2016, of users who choose to delete the application as well as users who choose to retain the application on the mobile phones. However, information shared via WhatsApp messenger after 25th September was allowed to be shared under the new policy. It held that it is always open to the existing users of WhatsApp who do not want to share their information to delete their accounts.

     

    Thereafter, the petitioners filed an SLP at the Supreme Court against the Delhi High Court judgment. The SLP was initially heard by a Division Bench and later a Constitution Bench.

     

    On 30 July 2017 the Additional Solicitor General, Tushar Mehta, filed an office memorandum before the Supreme Court. He informed the Court about the constitution of Justice B.N. Srikrishna Committee to examine issues surrounding data protection in India, suggest principles to govern data and draft a data protection bill. The Committee released its report and a draft law in 2018. In 2019, the Government introduced The Personal Data Protection Bill, 2019 in the Lok Sabha. And noted that it was based on the Justice B.N. Srikrishna Committee draft. The Bill is currently before the Standing Committee.

     

    In January 2021 Whatsapp rolled out a new privacy policy and had given users time till 28 February 2021 to accept and update. Some of the features of the new privacy policy triggered debates and seemed controversial: For instance, the new policy does not provide the users with the option to opt-out of their data being shared with Facebook Inc, Whatsapp’s parent company. Due to public push back, Whatsapp has extended the deadline to update to 15 May 2021.

     

    Soon after the policy was announced, a writ petition challenged it before the Delhi High Court. It claimed that the new privacy policy violated the fundamental right to privacy and allowed Whatsapp to profile users’ data without any government regulation. While this case is ongoing, the Confederation of All India Traders moved to the Supreme Court with a similar plea. The Supreme Court refused to admit the writ petition as the Delhi High Court already hearing the challenge. 

     

    On 15 February 2021, an application was filed in this case, Karmanya Singh Sareen v. Union of India, challenging the new privacy policy. The application claimed that Whatsapp was offering lower privacy protections in Indian as compared to Europe. The three-judge bench led by CJI Bodbe issued notice and asked all the parties to file their replies. 

     

    Parties Involved
    Lawyers
    Issues

    1. Whether WhatsApp's Privacy policy of August 2016 violates the Right to Privacy of its users?

    2. Whether a privacy policy should have specific 'opt-out' provisions without the user having to 'opt-out' of the application in totality? In this case, whether WhatsApp is obligated to provide a specific option of 'Not to share data' with Facebook?

    3. Whether the manner of seeking 'consent' from users who are unable to read and understand the new privacy policy amounts to deception?