WhatsApp privacy policy row: Meta moves Supreme Court against NCLAT verdict on abuse of dominance and data sharing

The landscape of digital jurisprudence in India is currently witnessing a watershed moment as Meta Platforms Inc. and its subsidiary, WhatsApp, have approached the Supreme Court of India. This legal escalation follows a significant blow dealt by the National Company Law Appellate Tribunal (NCLAT), which recently upheld a penalty of Rs 213.14 crore imposed by the Competition Commission of India (CCI). At the heart of this dispute lies WhatsApp’s contentious 2021 privacy policy update—a move that regulators argue constitutes a classic case of abuse of dominant position and coercive data-sharing practices. As a senior practitioner in the Indian legal arena, I view this case not merely as a corporate dispute, but as a defining inquiry into how antitrust laws must adapt to the “data-is-the-new-oil” economy.

The Genesis of the Conflict: The 2021 Privacy Policy Update

To understand the gravity of the current Supreme Court appeal, one must revisit the events of January 2021. WhatsApp, the undisputed leader in India’s over-the-top (OTT) messaging market, introduced an update to its terms of service and privacy policy. Unlike previous updates, this iteration presented users with a “take-it-or-leave-it” ultimatum: accept the new terms, which allowed for expanded data sharing with Meta-owned companies (including Facebook and Instagram), or lose access to the application entirely.

The primary concern raised by the CCI was that this data sharing was not restricted to service-related improvements but extended to advertising and business integrations across Meta’s ecosystem. The regulator observed that WhatsApp’s massive user base in India—estimated at over 500 million—gave it a position of such strength that users were essentially coerced into consenting, as there were no viable alternatives with comparable network effects. This led to a suo motu investigation by the CCI, culminating in the significant penalty and a series of cease-and-desist orders.

The Competition Commission’s Stand: Abuse of Dominance

The CCI’s order, which the NCLAT subsequently upheld, found Meta and WhatsApp in violation of Section 4 of the Competition Act, 2002. Under Indian law, being “dominant” is not an offense; however, the “abuse” of that dominance is strictly prohibited. The CCI identified several key facets of this abuse.

Market Power and Network Effects

WhatsApp enjoys a dominant position in the market for OTT messaging apps through smartphones in India. The CCI argued that the “network effect”—where the value of a service increases as more people use it—creates a high barrier to entry for competitors. Because everyone’s social and professional circles are on WhatsApp, a user cannot easily migrate to Signal or Telegram without losing significant connectivity. Meta leveraged this dominance to impose unfair conditions on users.

Tying and Bundling of Services

The 2021 policy was viewed as a form of “tying.” To use the messaging service (the tying product), users were forced to accept data-sharing terms that benefited Meta’s advertising business (the tied product). This cross-linking of data allows Meta to create hyper-granular user profiles, giving it an insurmountable advantage in the targeted advertising market, thereby stifling competition from other digital players who do not have access to such diverse data streams.

The NCLAT Verdict: Validating the Regulator’s Authority

Meta challenged the CCI’s findings before the NCLAT, arguing that the regulator had overstepped its jurisdiction. Meta’s primary contention was that privacy concerns fall under the ambit of the IT Act and the then-forthcoming Digital Personal Data Protection (DPDP) Act, rather than competition law. However, the NCLAT dismissed these arguments.

The Tribunal held that while privacy is a fundamental right, the commercial exploitation of user data by a dominant player directly impacts market dynamics. The NCLAT affirmed that the CCI has the jurisdiction to examine privacy policies if those policies are used as a tool to gain an unfair competitive advantage. By upholding the Rs 213.14 crore penalty, the NCLAT sent a clear message: Big Tech cannot hide behind “user consent” when that consent is obtained through systemic coercion.

Meta’s Challenge in the Supreme Court: Key Legal Contentions

In its appeal to the Supreme Court, Meta is expected to raise several sophisticated legal questions that will require the Apex Court to balance technological innovation with regulatory oversight. As we dissect the petition, three major themes emerge.

Jurisdictional Overlap with the DPDP Act

One of the strongest arguments Meta is likely to pursue is the enactment of the Digital Personal Data Protection Act, 2023. Meta contends that since the Parliament has now established a specific framework for data protection and a dedicated Data Protection Board, the CCI should not be adjudicating matters involving data sharing and user consent. This “special law vs. general law” debate is a classic legal conflict in India. Meta argues that the DPDP Act is a complete code for data issues, and the CCI’s interference creates a risk of conflicting regulatory orders.

The Concept of Voluntary Consent

Meta maintains that the 2021 update was transparent and that users were given ample notice. From a corporate legal standpoint, Meta argues that “consent” in a digital contract is a private agreement between the platform and the user. They challenge the CCI’s notion that a “take-it-or-leave-it” policy is inherently abusive, suggesting that in a free market, businesses should have the autonomy to define their terms of service.

Distinction Between Personal and Transactional Data

Meta has consistently argued that the data shared with Facebook does not include the content of private messages, which remain end-to-end encrypted. They claim the data sharing is limited to “business interactions” and technical metadata. The Supreme Court will have to decide whether the sharing of even “metadata” (who you talk to, for how long, from where, and on what device) provides Meta with a “data advantage” that constitutes an entry barrier for competitors.

The Role of ‘Data Advantage’ in Antitrust Jurisprudence

This case marks a shift in Indian antitrust law from price-centric analysis to data-centric analysis. Historically, abuse of dominance was linked to predatory pricing or excessive pricing. However, in the digital economy, many services are “free.” The “price” paid by the consumer is their data. The CCI and NCLAT have recognized that the accumulation of vast amounts of data can lead to “data moats,” where a company becomes so powerful that no competitor can catch up. If the Supreme Court upholds the NCLAT’s view, it will solidify the principle that “data privacy” and “data competition” are two sides of the same coin.

Global Precedents and the Indian Context

India is not alone in this struggle. The European Union’s Digital Markets Act (DMA) and various rulings by the German Federal Cartel Office (Bundeskartellamt) against Facebook have set similar precedents regarding the “coupling” of data across different services. The Supreme Court of India often looks at global benchmarks while ensuring the ruling remains rooted in Indian socio-economic realities. In India, where digital literacy is still evolving, the “coercive” nature of a dominant app’s policy is arguably more impactful than in more mature markets.

Potential Outcomes and Their Implications

The Supreme Court’s decision will have far-reaching consequences for the entire Indian startup and Big Tech ecosystem. There are several possible directions the Court might take.

Scenario 1: Upholding the NCLAT Verdict

If the Supreme Court dismisses Meta’s appeal, it will empower the CCI to act as a primary watchdog for the digital economy. It would mean that any dominant tech firm—be it in e-commerce, food delivery, or search—cannot force users to share data across different platforms within the same group without explicit, non-coerced opt-ins. This would be a major victory for consumer rights and smaller competitors.

Scenario 2: Limiting CCI’s Jurisdiction

The Court might rule that while the CCI can investigate competition aspects, it must defer to the Data Protection Board (under the DPDP Act) for matters concerning the validity of consent and data-handling practices. This would effectively split the regulatory oversight, potentially slowing down enforcement but providing more specialized handling of data issues.

Scenario 3: A Middle Path on Data Silos

The Court could allow Meta to share data but impose strict “silo” requirements, ensuring that data collected from WhatsApp cannot be used to boost Facebook’s ad revenue or Instagram’s algorithms. This would address the competition concern without necessarily striking down the entire policy.

Conclusion: A Landmark Moment for the Indian Judiciary

As we await the proceedings in the Supreme Court, it is clear that the “WhatsApp Privacy Policy Row” is about much more than a Rs 213 crore fine. It is a battle over the soul of the Indian digital market. It asks the fundamental question: Does a dominant global corporation have the right to dictate terms to a billion-plus population under the guise of contractual freedom, or does the state have a duty to intervene when that freedom becomes a facade for a monopoly?

For legal professionals, this case is a masterclass in the intersection of Constitutional Law (Right to Privacy), Administrative Law (Regulatory Jurisdiction), and Corporate Law (Competition/Antitrust). The Supreme Court’s intervention will provide the much-needed clarity required for India to transition into a regulated yet flourishing digital economy. One thing is certain—the verdict will set a precedent that will be cited in international courts for decades to come, as the world watches how India tames the giants of the Silicon Valley.

The legal community expects a rigorous debate on whether the “efficiency” claimed by Meta through data integration outweighs the “exclusionary” effects such integration has on the market. In the words of several eminent jurists, the law must stay ahead of the technology it seeks to regulate. This case is the Supreme Court’s opportunity to ensure that the “Digital India” of tomorrow remains a fair and competitive marketplace for all.