WhatsApp sues Indian government over new privacy laws
The law requires social media companies to identify users when authorities demand it, which could see the end of encryption


Facebook-owned WhatsApp has filed a lawsuit against the Indian government in a bid to block regulations that would force the company to break privacy protections for its users.
The case, filed at the Delhi High Court, declares that India's new internet laws violate privacy rights in the country's constitution as it requires social media companies to identify the "first originator of information" when authorities demand it, according to Reuters.
Even though the law requires the company to identify users accused of wrongdoing, WhatsApp said this is not possible in practice. As messages are end-to-end encrypted, it would mean that the company would have to break encryption for receivers, as well as originators, in order to comply with the new law.
"Civil society and technical experts around the world have consistently argued that a requirement to 'trace' private messages would break end-to-end encryption and lead to real abuse. WhatsApp is committed to protecting the privacy of people's personal messages and we will continue to do all we can within the laws of India to do so," a WhatsApp spokesperson said to IT Pro.
India's new rules also dictate that social media companies must remove content within 36 hours of a legal order, appoint Indian citizens to key compliance roles, and set up a mechanism to deal with complaints. Furthermore, they must use automated processes to take down pornography.
The lawsuit is another example of the tensions between tech giants and Modi's government in India. Earlier this week, Indian police visited Twitter's office in Delhi to serve a notice to the country's managing director about an investigation into how it tagged posts by a ruling party spokesperson on its platform.
It labelled the post as "manipulated media" following complaints from the opposition party, who said the document shared in the post, which criticised the government's handling of the pandemic and was allegedly published by the opposition, was fake.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Zach Marzouk is a former ITPro, CloudPro, and ChannelPro staff writer, covering topics like security, privacy, worker rights, and startups, primarily in the Asia Pacific and the US regions. Zach joined ITPro in 2017 where he was introduced to the world of B2B technology as a junior staff writer, before he returned to Argentina in 2018, working in communications and as a copywriter. In 2021, he made his way back to ITPro as a staff writer during the pandemic, before joining the world of freelance in 2022.
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan
-
Latitude Financial's data policies questioned after more than 14 million records stolen
News Some of the data is from at least 2005 and includes customers’ name, address, and date of birth
By Zach Marzouk
-
Latitude hack now under state investigation as customers struggle to protect their accounts
News The cyber attack has affected around 330,000 customers, although the company has said this is likely to increase
By Zach Marzouk
-
IDCARE: Meet the cyber security charity shaping Australia and New Zealand's data breach response
Case Studies IDCARE is recruiting a reserve army to turbocharge the fightback against cyber crime not just in the region, but in the interests of victims all over the world
By Zach Marzouk
-
Australia commits to establishing second national cyber security agency
News The country is still aiming to be the most cyber-secure country in the world by 2030
By Zach Marzouk
-
Medibank bleeds $26 million in cyber costs following hack
News The company believes this figure could rise to $45 million for the 2023 financial year
By Zach Marzouk
-
TikTok's two new European data centres to address data protection concerns
News The company is under pressure to prove its user data isn’t being accessed by the Chinese state
By Zach Marzouk
-
Cyber attack on Australia’s TPG Telecom affects 15,000 customers
News It is the third cyber attack on a major Australian telco since October
By Zach Marzouk
-
Telstra blames IT blunder for leak of 130,000 customer records
News Australia’s biggest telco said that the error was due to a mismanagement of databases and not a cyber attack
By Zach Marzouk