During the hearing, the Chief Justice expressed deep concern over what he described as a coercive consent architecture. Referring to the 2021 policy update, the Bench objected to the “take-it-or-leave-it” approach that left users with no real choice but to agree to data sharing if they wished to continue using WhatsApp.
The Court was particularly critical of the complexity of the policy language and opt-out clauses. The Chief Justice remarked that the terms were “so cleverly crafted” that an ordinary user could not reasonably be expected to understand them, asking pointedly how someone from a rural part of the country would be able to make an informed decision. Consent obtained in such circumstances, the Bench suggested, could not be treated as meaningful or voluntary.
In unusually blunt language, the Court warned Meta and WhatsApp that it would not allow them to “share a single word” of users’ data, and that an undertaking may be required from the company restraining any such sharing pending further orders. The Bench repeatedly emphasised that the right to privacy is “zealously guarded” in India and cannot be compromised for commercial considerations.
Consent Architecture Problem
The Supreme Court’s sustained focus on WhatsApp’s “take-it-or-leave-it” privacy architecture reflects a deeper constitutional concern: whether consent obtained in a digitally asymmetric environment can ever be considered legally meaningful. The problem identified by the Bench is not merely one of disclosure, but of structural coercion. Where a platform operates at near-universal scale, the formal act of clicking “agree” risks becoming a legal fiction, because refusal effectively results in exclusion from a core communication utility that underpins social, economic, and civic interaction.
This explains the Court’s repeated emphasis on the perspective of an ordinary, non-expert user — explicitly invoking someone from rural India. The signal is doctrinal. Consent, to be constitutionally valid, must be informed, comprehensible, and genuinely voluntary. Where the choice is between accepting complex, opaque data-sharing terms or losing access to a dominant service, voluntariness is materially compromised.
Regulatory findings already on record reinforce this concern. India’s competition authorities have previously held that WhatsApp’s 2021 policy update presented users with a forced binary choice, offering no meaningful opt-out while continuing service access. Contemporary reporting noted that the Supreme Court appeared unconvinced that such an arrangement could amount to valid consent in substance, even if it satisfies the platform’s formal contractual design. The Bench’s warning that it would not permit the sharing of “even a single word” of user data absent assurances reflects an attempt to prevent irreversible downstream data flows from being justified ex post by weak, comprehension-deficient consent.
At its core, the Court’s discomfort lies in the conflation of two distinct layers: front-end acceptance and substantive consent. The former can be engineered through interface design; the latter must withstand constitutional scrutiny. The hearing suggests that India’s apex court is prepared to test dominant digital platforms against this distinction with unusual rigour.
Interim Undertaking or Judicial Restraint
The Supreme Court gave Meta and WhatsApp time to file a detailed response, but made clear that it was prepared to step in if the companies did not provide adequate assurances. The Chief Justice indicated that, absent a satisfactory undertaking, the Court would be compelled to pass interim orders restraining data sharing under the impugned policy.
The tone of the hearing suggested that the Court views the issue not merely as a contractual dispute between a platform and its users, but as a constitutional question touching the scope of the fundamental right to privacy, recognised by the Supreme Court in Justice K.S. Puttaswamy v. Union of India (2017). The emphasis was on substance over form: even if users technically “agree” to a policy, consent that is obtained through compulsion or obscurity may not withstand constitutional scrutiny.
Link to Competition Law Proceedings
The hearing is also connected to ongoing competition law proceedings involving Meta. WhatsApp and Meta have moved the Supreme Court against an order of the National Company Law Appellate Tribunal (NCLAT), which upheld the Competition Commission of India’s (CCI) ₹213.14 crore penalty on Meta for abuse of dominant position. The CCI and NCLAT had found that WhatsApp’s 2021 privacy policy amounted to unfair terms imposed on users, leveraging the platform’s market dominance.
By hearing the privacy challenge alongside the competition appeal, the Supreme Court has effectively brought together two strands of regulation — data protection and competition law — that increasingly intersect in the digital economy. The decision to implead MeitY further signals that the Court sees the matter as one with systemic implications beyond a single company or policy.
Interim Orders as De-Facto Regulation
If the Supreme Court proceeds to issue interim directions restraining WhatsApp and Meta from sharing user data pending final adjudication, the practical consequence will extend well beyond this single dispute. Such an order would operate as de-facto data-flow regulation for one of the largest digital networks in the country, freezing practices that affect hundreds of millions of users.
This judicial posture must be read against India’s evolving regulatory architecture. The Digital Personal Data Protection Act, 2023 establishes the statutory framework for data governance, and the government has moved to notify rules to operationalise the regime. At the same time, industry reporting indicates ongoing concerns around enforcement sequencing, institutional capacity, and compliance timelines. In this transitional phase, interim judicial restraint becomes unusually consequential because it can preserve the status quo in real time, rather than after prolonged regulatory processes.
WhatsApp’s scale magnifies the stakes. India is consistently identified as the platform’s largest market globally, with user estimates exceeding 500 million. Once personal data is shared across corporate entities and integrated into advertising or profiling systems, unwinding those flows is technically complex and, in some cases, practically impossible. This reality explains why courts increasingly rely on interim undertakings — not as punishment, but as a preventive mechanism to avoid irreversible outcomes while legal questions remain unresolved.
The broader implication is institutional. In the absence of settled enforcement practice under the new data protection regime, courts may temporarily assume a gatekeeping role, shaping platform behaviour through interim orders that effectively function as regulatory stops. The WhatsApp case may therefore become a template for how India manages high-stakes data disputes during this regulatory transition.
Global Treatment of the Same Issue
Globally, WhatsApp/Meta’s privacy disputes have often converged on the same two questions India is now asking: (1) transparency—do users understand what happens to their data? and (2) freedom—can users refuse without losing the service? In the European Union, WhatsApp Ireland was fined €225 million in 2021 by Ireland’s Data Protection Commission after a long-running GDPR inquiry focused on transparency obligations—what information WhatsApp provided to users and non-users, and how clearly it explained processing. Separately, the EU’s competition-privacy crossover jurisprudence has hardened: the Court of Justice has indicated that competition authorities may take data-protection compliance seriously in dominance assessments, reinforcing the idea that dominant platforms cannot treat consent as a rubber stamp for expansive personalisation and data combination.
Germany’s Bundeskartellamt proceedings against Meta add another illustration: a competition authority treating extensive cross-service data combination as abusive when tied to dominance—arguing that users’ “agreement” is not freely chosen in a dominance setting.
What is distinctive about India’s emerging approach is the three-track convergence:
- Competition remedy: India’s CCI ordered behavioural restrictions including a five-year bar on data sharing for advertising (as reported in official releases and news coverage).
- Constitutional language: the Supreme Court is explicitly framing privacy as a right that cannot be diluted by commercial considerations.
- Administrative state involvement: the Court’s direction to bring in MeitY signals that India is not treating this as a purely private dispute, but as a governance question with systemic regulatory consequences.
Taken together, this suggests that India may be converging on a model where dominance, forced consent, and cross-platform data sharing are treated as an integrated problem attracting layered regulatory and judicial responses.
Big Tech’s Perspective and the User Behaviour Paradox
From the perspective of large technology platforms, cross-entity data sharing is not an ancillary practice but a central component of the economic model that supports product development, business messaging tools, ad measurement, and ecosystem integration. WhatsApp has consistently argued that restrictions on such sharing could affect features and commercial offerings, and reporting from the current proceedings notes the company’s warning that judicial restraints may impact its business in India.
Platforms also briefly advance a related economic argument: that cross-entity data sharing underwrites the ability to offer services like WhatsApp free at the point of use, particularly in highly price-sensitive markets such as India. The claim is that advertising and business-messaging revenues generated elsewhere in the Meta ecosystem help subsidise infrastructure, security, and scale for hundreds of millions of Indian users who pay no subscription fee and are unlikely to do so. This framing is typically presented as a digital-inclusion rationale rather than a privacy trade-off, though it has not so far found explicit judicial endorsement in India.
User behaviour complicates this narrative further. Despite periodic public backlash and stated concern about privacy, most users continue to rely on dominant platforms — a phenomenon widely described in academic literature as the privacy paradox. In India, this paradox is intensified by network effects. When families, schools, neighbourhood groups, and small businesses all operate on a single platform, switching carries high social and economic costs. Earlier controversies around WhatsApp’s privacy policy saw temporary migration to alternatives, but usage patterns ultimately stabilised due to the platform’s entrenched position.
Survey data underscores the contradiction. Consumer research in India consistently shows high stated concern for data protection and trust, even as actual behaviour reflects continued reliance on the same platforms. This gap between preference and practice is precisely why courts step in. Where market exit is impractical and comprehension is uneven, privacy cannot be left entirely to consumer choice or interface design.
The Supreme Court’s posture — explicitly rejecting the idea that commercial interests can override privacy rights — reflects a recognition of this structural imbalance. In digital markets characterised by scale, lock-in, and opacity, rights-based intervention becomes the corrective mechanism when market discipline alone proves insufficient.
Why This Matters
The Supreme Court’s intervention marks one of the strongest judicial pushbacks yet against global technology platforms operating in India. At stake is not just WhatsApp’s 2021 policy, but the broader question of whether large digital intermediaries can rely on “forced consent” models to harvest and monetise user data in a country with hundreds of millions of users and stark digital literacy gaps.
The outcome of the case could shape how consent, data sharing, and commercial use of personal information are interpreted under Indian constitutional law, even as the country moves toward fuller implementation of its digital governance and data protection regime. For now, the Court’s message is clear: scale and market power do not confer a licence to dilute the privacy rights of Indian citizens.
.svg)
Politics
Economy
Business
World
Defence
Law & Justice
Science & Technology
Rida Prime
About us