ICO investigates WhatsApp-Facebook data sharing deal
Data watchdog says it will "pull back the curtain" on how information will be shared

The Information Commissioner's Office (ICO) will investigate WhatsApp's decision to share users' data with Facebook, it has confirmed.
Elizabeth Denham, the new information commissioner, said she plans to "pull back the curtain" on exactly how people's data is being shared between the two firms, following yesterday's announcement.
WhatsApp will let businesses chat to users on its platform for the first time in the next few months, but also changed its terms and conditions to allow it to pass users' information onto its parent company Facebook, which bought it for 11.2 billion in 2014.
The UK's data watchdog said there may be nothing wrong with the decision to share data, but that it has a responsibility to check.
Denham said in a statement: "The changes WhatsApp and Facebook are making will affect a lot of people. Some might consider it'll give them a better service, others may be concerned by the lack of control.
"Our role is to pull back the curtain on things like this, ensuring that companies are being transparent with the public about how their personal data is being shared, and protecting consumers by making sure the law is being followed.
"We've been informed of the changes. Organisations do not need to get prior approval from the ICO to change their approaches, but they do need to stay within data protection laws. We are looking into this."
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
WhatsApp believes that by sharing data with Facebook, the social network can serve better adverts to users, as well as allowing the chat platform "to do things like track basic metrics about how often people use our services and better fight spam on WhatsApp".
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse
News The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
By Emma Woollacott
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victims
News Companies need to treat victims with swift, practical action, according to the ICO
By Emma Woollacott
-
LinkedIn backtracks on AI training rules after user backlash
News UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
By Emma Woollacott
-
UK's data protection watchdog deepens cooperation with National Crime Agency
News The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
By Emma Woollacott
-
ICO slams Electoral Commission over security failures
News The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
By Emma Woollacott
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firms
News Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
By Emma Woollacott
-
ICO reprimands Coventry school over repeated data protection failures
News The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach
By Emma Woollacott
-
ICO dishes out fine to HelloFresh for marketing spam campaign
News HelloFresh failed to offer proper opt-outs, the ICO said, and customers weren’t warned their data would be used for months after they cancelled
By Emma Woollacott