WhatsApp told to stop sharing user data with Facebook by French data protection authority; WhatsApp has one month to comply or potentially face sanctions
BRUSSELS (Reuters) - France's data privacy watchdog may fine messaging app WhatsApp if it does not comply with an order to bring …
Context & Ripple Effects
France's privacy regulator has form here: back in February it gave [[a:864657|Facebook three months to stop tracking non-users and halt some transfers of personal data to the US]]. The new order extends that pressure to its messaging arm, after Germany separately ordered Facebook to stop collecting WhatsApp user data and delete what had been forwarded from roughly 35 million German accounts.
The move also lands weeks after the Article 29 Working Party asked Facebook to stop using WhatsApp data bloc-wide, so Paris is converting a coordinated EU request into a unilateral national deadline — one month to comply or face sanctions.
First-order effects
- WhatsApp must sever the sharing pipeline between European user data and Facebook within a month, cutting off the ad platform's access to messaging metadata in France or risking fines and sanctions.
- Facebook loses, at minimum in the French market, one of its richest cross-app data sources just as regulators in Germany and at EU level are converging on the same demand.
Second-order effects
- Other national authorities, already aligned through the Article 29 Working Party, gain a template for enforcing the same order locally — turning a patchwork of requests into enforceable deadlines country by country.
- WhatsApp faces a costly engineering choice: build region-specific data walls for Europe or abandon the sharing arrangement entirely, since partial compliance invites the sanctions Paris is threatening.
Third-order effects
- The escalation path is now visible: national orders harden into bloc-wide enforcement once GDPR arrives, culminating in Ireland's DPC hitting WhatsApp with a €225M GDPR fine four years later — the second-largest under the regime.
- If the pattern holds, cross-app data flows inside large US platform families become structurally untenable in Europe, forcing separate regional data architectures rather than shared global ones.
The trend: European regulators are ratcheting from advisory requests to binding national orders to multi-hundred-million-euro GDPR fines against US platforms' cross-service data sharing.