Germany's data protection watchdog complains to EU Parliament that Germany had “sent 50+ complaints about WhatsApp” to the Irish DPC and none had been closed
Javier Espinoza / Financial Times :
Context & Ripple Effects
Germany's complaint to the EU Parliament is an escalation in a five-year standoff over how WhatsApp data flows into Facebook's ad machine. The Article 29 Working Party had already asked Facebook to stop using WhatsApp data back in 2016 (Article 29 Working Party), and Germany's own antitrust watchdog ordered Facebook to stop combining WhatsApp and Instagram data without consent in 2019 — a ruling Facebook appealed (German antitrust order).
The grievance now is procedural: Ireland's Data Protection Commission is the lead GDPR regulator for Facebook's apps, holding 11 of its 19 cross-border investigations (cross-border investigation docket), and Germany says more than 50 of its WhatsApp referrals sat unclosed. Going to the EU Parliament frames slow Irish enforcement as a systemic problem, not a bilateral dispute.
First-order effects
- Ireland's DPC faces direct political pressure from a member-state regulator to clear its backlog of WhatsApp cases, threatening the credibility of its role as lead supervisor for Meta's European operations.
- Facebook/Meta's German data-combining restrictions — already imposed by the antitrust order and appealed — gain a parallel privacy-track challenge that raises the cost of continuing the practice.
Second-order effects
- Other national regulators with unresolved referrals are positioned to echo Germany's complaint, eroding the one-stop-shop convention that funnels big-tech enforcement through Dublin.
- If Ireland's docket stays slow, member states may increasingly act unilaterally — the German path — fragmenting enforcement and pushing Meta toward stricter regional data separations rather than unified processing.
Third-order effects
- The pattern points toward a restructuring of GDPR's lead-regulator model, where persistent national frustration forces either faster joint enforcement or a shift of major-platform cases away from the company's home-state regulator entirely — a dynamic the eventual €225M WhatsApp fine illustrates (€225M fine).
- Privacy and competition authorities converging on the same conduct, as Germany did across both tracks, suggests data-combination practices will face overlapping legal regimes rather than a single gatekeeper review.
The trend: EU platform privacy enforcement is drifting from Ireland-centered one-stop-shop handling toward multi-front national action, with Germany's unclosed-complaints grievance as the flashpoint.