Heads of EU country data protection authorities, Article 29 Working Party, ask Facebook to stop using WhatsApp data
Yahoo also gets warning over breach of accounts in 2014 — European Union privacy chiefs said Facebook Inc. must stop processing user data from its WhatsApp messaging service …
Context & Ripple Effects
A month after Hamburg's regulator ordered Facebook to halt collection on WhatsApp users and delete what it had already taken from roughly 35 million German accounts (Germany's deletion order), the Article 29 Working Party is escalating the dispute from one national authority to the full bloc: the heads of all EU country data protection authorities jointly demanding Facebook stop processing WhatsApp data, with a parallel warning to Yahoo over its 2014 account breach folded into the same statement.
The joint letter matters because it converts scattered national rulings into coordinated EU pressure — the same pressure that later produced France's own one-month compliance ultimatum to WhatsApp and, once GDPR enforcement matured, Ireland's record-setting action against the company.
First-order effects
- Facebook must now defend its WhatsApp data-sharing practice against every EU privacy authority at once rather than case-by-case, while WhatsApp users across the bloc face the prospect of their messaging metadata being walled off from Facebook's ad targeting.
Second-order effects
- National regulators take the Working Party's stance as cover to act individually — as France's CNIL did a year later with a compliance deadline and sanction threat — multiplying legal exposure for Facebook faster than any single ruling would.
Third-order effects
- If the pattern holds, enforcement consolidates around the lead-supervisor model under GDPR, where accumulated unresolved complaints funnel into landmark fines like the Irish DPC's €225M penalty against WhatsApp — turning data-sharing disputes into multi-year, nine-figure regulatory sagas.
The trend: European data protection authorities are running a coordinated, years-long campaign to sever WhatsApp-to-Facebook data flows, escalating from national orders to joint EU demands and eventually GDPR-scale fines.