WhatsApp Privacy Policy Saga Reaches Supreme Court: Meta Challenges ₹213 Crore Penalty

In a landmark escalation of India's regulatory scrutiny on Big Tech, Meta Platforms Inc. and its subsidiary WhatsApp have filed petitions before the Supreme Court of India, seeking to overturn the National Company Law Appellate Tribunal's (NCLAT) November 2025 order. This ruling upheld a ₹213.14 crore penalty imposed by the Competition Commission of India (CCI) in November 2024, stemming from WhatsApp's controversial 2021 privacy policy update. At the heart of the dispute lies the allegation that the policy's "take-it-or-leave-it" approach constituted an abuse of dominant position under the Competition Act, 2002, by forcing users to consent to data sharing with Meta entities to retain access to the messaging service. As the case moves to the apex court—represented by law firm Shardul Amarchand Mangaldas & Co.—it promises to profoundly influence how competition law intersects with data privacy in digital markets, with no hearing date yet scheduled. This development not only challenges the financial penalty but also the broader compliance obligations on user-choice safeguards, marking a critical juncture for tech regulation in India.

The Genesis of the Dispute

The controversy traces its roots to January 2021, when WhatsApp announced an updated privacy policy that mandated users to accept broader data-sharing provisions with other Meta group companies—such as Facebook and Instagram—to continue using the platform. Unlike earlier iterations in 2016 and 2019, which allowed users to opt out of such sharing while still accessing core features, the 2021 policy tied consent to service continuity. This shift triggered widespread user backlash and concerns over privacy erosion, particularly in India, WhatsApp's largest market with over 500 million users.

The CCI, acting on suo motu cognisance, initiated an inquiry into whether this policy violated anti-competitive practices. As noted in the sources, "The CCI took suo motu cognisance, observing that the update effectively removed users’ choice to opt out of data sharing." This move reflected India's growing emphasis on protecting consumer data amid global debates on platform dominance. The regulator's probe, spanning nearly four years, examined WhatsApp's market position in over-the-top (OTT) messaging services, where it commands an estimated 95% share in India. Legal experts view this as a test case for applying traditional competition principles to digital ecosystems, where free services are subsidized by data monetization.

The policy's implications extended beyond India, prompting lawsuits worldwide, but the CCI's intervention was particularly stringent. It highlighted how tying user access to data consent could stifle competition by bundling unrelated services and limiting user autonomy. This backdrop set the stage for a protracted legal battle, underscoring the challenges of enforcing competition law in an era where data is the new currency.

CCI's Probe and Penalty: A Regulatory Crackdown

In its November 2024 order, the CCI unequivocally concluded that WhatsApp's policy amounted to an abuse of dominant position under Section 4 of the Competition Act, 2002. The regulator found three key violations: imposition of unfair conditions (the mandatory consent for data sharing), denial of market access to competitors by leveraging network effects, and leveraging dominance in messaging to bolster Meta's position in online display advertising.

"The regulator imposed a monetary penalty on Meta and issued several directions aimed at restoring user choice and limiting cross-platform data flows," as detailed in the proceedings. The penalty was calculated at 4% of WhatsApp's average relevant turnover, amounting to ₹213.14 crore—a symbolic yet substantial fine for a trillion-dollar company. Beyond the monetary sanction, the CCI issued remedial measures, including a five-year prohibition on sharing user data with Meta entities for advertising purposes, mandates for opt-in and opt-out mechanisms, and requirements for transparent disclosures on data categories and purposes.

These directions aimed to dismantle the tying arrangement, ensuring users could decline data sharing without losing service access. The CCI's reasoning emphasized that such practices not only harmed consumers but also entrenched Meta's ecosystem, potentially foreclosing opportunities for rival platforms. For legal professionals, this order exemplifies proactive enforcement, drawing parallels to landmark cases like the EU's fines on Google for similar bundling tactics. However, critics argued it overlooked the nuances of WhatsApp's ad-free, free-to-use model, which relies on data for sustainability.

NCLAT's Mixed Verdict: Partial Relief Amid Upholding Core Findings

Meta and WhatsApp promptly challenged the CCI order before the NCLAT, leading to a series of rulings that balanced regulatory zeal with business realities. In January 2025, a two-member bench comprising Chairperson Justice Ashok Bhushan and Technical Member Arun Baroka granted interim relief, staying both the penalty and the five-year data-sharing ban. The tribunal observed that a complete prohibition "could potentially disrupt WhatsApp’s business model, given that the platform is offered free to users." This stay provided breathing room, allowing WhatsApp to continue operations without immediate financial or operational upheaval.

The final judgment, delivered in November 2025, offered a nuanced outcome. "In its final judgment delivered in November 2025, the appellate tribunal partly ruled in favour of WhatsApp by setting aside the CCI’s finding that Meta had leveraged its dominant position in the OTT messaging market to protect its position in online display advertising." However, the NCLAT upheld the core finding of abuse of dominance through the "take-it-or-leave-it" policy and affirmed the ₹213.14 crore penalty. It also retained most of the CCI's user-choice safeguards, such as opt-in requirements and disclosures.

Following a clarification application by the CCI, the NCLAT reinstated the regulator’s remedial directions in full, granting WhatsApp a three-month window to implement them. This adjustment ensured compliance without undue delay, but it left Meta dissatisfied, particularly with the penalty and ongoing obligations. The tribunal's decision, while providing partial vindication on the advertising leverage claim, reinforced the principle that dominance cannot justify coercive data practices. For antitrust practitioners, the NCLAT's emphasis on business model viability introduces a pragmatic lens to enforcement, potentially influencing future appeals.

Escalation to the Supreme Court: Challenging the Foundations

Undeterred, Meta and WhatsApp escalated the matter to the Supreme Court in early 2026, filing petitions that contest both the NCLAT's upholding of the penalty and the reinstated compliance mandates. The appeals argue that the policy update did not constitute an abuse, as it did not reduce functionality for non-consenting users and aligned with global standards. They further contend that the CCI overreached by conflating competition and privacy concerns, areas better addressed under emerging laws like the Digital Personal Data Protection Act, 2023 (DPDPA).

The case is expected to be closely monitored, as it will probe deeper into whether linking service access to data consent qualifies as a tying arrangement under competition law. Sources indicate the petitions highlight the NCLAT's alleged errors in sustaining the penalty despite setting aside key findings, potentially rendering the fine disproportionate. With no hearing yet listed, the Supreme Court's intervention could clarify ambiguities in digital market definitions and the scope of "unfair conditions" in free platforms.

Legal Analysis and Key Principles at Stake

From a legal standpoint, this saga illuminates the application of Section 4 of the Competition Act to intangible assets like data. The "abuse of dominance" doctrine prohibits exploitative practices, but its extension to privacy policies raises novel questions. The tying arrangement—where data sharing is bundled with messaging access—mirrors traditional antitrust concerns, akin to Microsoft's bundling of Internet Explorer. Yet, in digital contexts, courts must weigh innovation incentives against consumer harm.

The NCLAT's partial overturning of the advertising leverage finding suggests a cautious approach: dominance in one market (messaging) cannot be presumed to automatically strengthen another (advertising) without direct evidence of foreclosure. However, upholding the penalty underscores that user choice is sacrosanct, aligning with Article 21 privacy rights under the Constitution, as affirmed in Justice K.S. Puttaswamy v. Union of India . The interplay with privacy laws is crucial; while the CCI focused on competition, the case indirectly bolsters DPDPA's consent frameworks.

Critically, the interim stay's rationale on business models introduces a "rule of reason" element, assessing net effects rather than per se illegality. If the Supreme Court affirms this, it could moderate aggressive regulation; a reversal might embolden CCI probes into other tech giants like Google or Amazon. Legal scholars note parallels to international precedents, such as the UK's CMA investigations into Apple’s app store policies, signaling a global convergence on platform accountability.

Implications for Legal Practice and the Justice System

For legal professionals, this case heralds a surge in competition-tech intersections, demanding expertise in data analytics and economic modeling to prove market effects. Firms like Shardul Amarchand Mangaldas & Co. may see increased mandates for Big Tech defenses, while regulators gain ammunition for ex-ante interventions. The justice system's workload could intensify, with similar disputes under the DPDPA anticipated.

Broader impacts include reshaping data-sharing norms: Mandated opt-ins could enhance user trust but raise compliance costs, potentially leveling the playing field for smaller apps. On a systemic level, a pro-regulator Supreme Court ruling might accelerate India's antitrust evolution, fostering a more competitive digital economy. Conversely, Meta's win could preserve free-service models, but at the risk of unchecked data dominance. Ultimately, this dispute exemplifies the evolving jurisprudence on balancing economic power with individual rights in the digital age.

Conclusion

As Meta and WhatsApp's Supreme Court challenge unfolds, it encapsulates the friction between global tech ambitions and national regulatory imperatives. The upheld ₹213.14 crore penalty and user safeguards represent a victory for competition enforcement, yet the appeals test the limits of such interventions. For India's legal community, the outcome will not only resolve this protracted battle but also chart the course for governing data-driven markets, ensuring that innovation does not come at the expense of fairness and privacy. With stakes extending to billions of users and the global tech landscape, the apex court's wisdom will be pivotal.