Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy authorizes WhatsApp to share user data, including account identifiers, device information, and usage activity, with other Meta Companies (including Meta Platforms, Instagram, and others) for purposes including advertising personalization, cross-platform content recommendations, and product integrations. Meta Companies may in turn use this data to show users relevant offers and ads across Meta products.
This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a data sharing relationship between WhatsApp and the broader Meta Companies ecosystem, authorizing use of WhatsApp-derived user data for advertising and personalization purposes across Meta products. The Irish Data Protection Commission has previously issued enforcement decisions related to this cross-Meta data sharing arrangement, and the provision requires ongoing evaluation under GDPR lawful basis and purpose limitation obligations for EU/EEA users.
The updated policy removes an unconditional statement of intent and replaces it with conditional language: 'We have no intention to introduce them, but if we ever do, we will update this Privacy Policy.' This revision reserves WhatsApp's right to introduce ad formats in Status and Channels in the future, subject only to updating the privacy policy at that time. The prior language established a stronger commitment; the updated language is more permissive. No specific consumer action is required; the change is informational regarding WhatsApp's future flexibility on advertising formats.
View change record →The updated terms no longer state that WhatsApp has no intention to introduce ads in Status and Channels. Instead, the revised language indicates that if ads are introduced in these features, WhatsApp will update its privacy policy to reflect the change. This means the company has reserved the option to add ads to Status and Channels in the future, subject to policy update notification.
View change record →Under this provision, WhatsApp account data, device identifiers, and usage activity may be shared with and used by other Meta Companies to personalize advertising and content across Meta products such as Facebook and Instagram. Users who do not wish to participate in this data sharing arrangement may delete their WhatsApp account using the in-app delete account feature.
Cross-platform context
See how other platforms handle Cross-Meta Companies Data Sharing and similar clauses.
Compare across platforms →Monitoring
WhatsApp has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"As part of the Meta Companies, WhatsApp receives information from, and shares information with, the other Meta Companies. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings, including the Meta Company Products. This includes: helping improve infrastructure and delivery systems; understanding how our Services or theirs are used; promoting safety, security, and integrity across the Meta Company Products, e.g., securing systems and fighting spam, threats, abuse, or infringement activities; improving their services and your experiences using them, such as making suggestions for you (for example, of friends or group connections, or of interesting content), personalizing features and content, helping you complete purchases and transactions, and showing relevant offers and ads across the Meta Company Products.Excerpt from WhatsApp's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision implicates GDPR Articles 5, 6, and 13, which govern lawful basis for processing, data minimization, and transparency obligations for EU/EEA users processed under WhatsApp Ireland Limited. The Irish Data Protection Commission is the lead supervisory authority. UK data protection law applies to UK users processed by WhatsApp LLC. The FTC Act Section 5 applies to US users under WhatsApp LLC. The provision has been the subject of enforcement scrutiny by the Irish DPC regarding whether adequate transparency and lawful basis were established for cross-Meta data sharing. (2) GOVERNANCE EXPOSURE: High. The authorization to share WhatsApp user data with Meta Companies for advertising personalization and cross-product content recommendations creates ongoing GDPR lawful basis documentation obligations. Where legitimate interests is asserted as the basis, a legitimate interests assessment is required. Where consent is asserted, the mechanism must meet GDPR Article 7 standards. (3) JURISDICTION FLAGS: EU/EEA users processed by WhatsApp Ireland Limited face the highest regulatory exposure given GDPR enforcement history. UK users processed by WhatsApp LLC under UK data protection law also require evaluation. California residents may have rights under CCPA to opt out of certain data sharing practices characterized as data sales or sharing for cross-context behavioral advertising. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations integrating WhatsApp Business API should assess whether cross-Meta data flows affect their own data processing obligations and downstream vendor contracts. The provision does not assert indemnification or audit rights between WhatsApp and Meta Companies from the user's perspective, and the terms governing inter-company data sharing are not disclosed to users in operational detail. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should document the lawful basis for cross-Meta data sharing in their records of processing activities. For EU operations, evaluate whether data subject rights requests (access, deletion, objection) submitted to WhatsApp are honored in a manner that also addresses Meta Companies' use of the shared data. Review data processing agreements with WhatsApp if using Business API. Monitor Irish DPC and EDPB guidance on Meta's cross-platform data sharing obligations.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a data sharing relationship between WhatsApp and the broader Meta Companies ecosystem, authorizing use of WhatsApp-derived user data for advertising and personalization purposes across Meta products. The Irish Data Protection Commission has previously issued enforcement decisions related to this cross-Meta data sharing arrangement, and the provision requires ongoing evaluation under GDPR lawful basis and purpose limitation obligations …
Under this provision, WhatsApp account data, device identifiers, and usage activity may be shared with and used by other Meta Companies to personalize advertising and content across Meta products such as Facebook and Instagram. Users who do not wish to participate in this data sharing arrangement may delete their WhatsApp account using the in-app delete account feature.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.