If you are in the EU or UK, you have the legal right to see the data WhatsApp holds about you, correct it, delete it, move it to another service, or object to certain uses, including any use of your data based on WhatsApp's claimed legitimate interests.
This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights, enforceable under GDPR, give EU and UK users meaningful control over their personal data held by WhatsApp, including the ability to object to data processing for purposes beyond core service delivery.
The updated policy removes an unconditional statement of intent and replaces it with conditional language: 'We have no intention to introduce them, but if we ever do, we will update this Privacy Policy.' This revision reserves WhatsApp's right to introduce ad formats in Status and Channels in the future, subject only to updating the privacy policy at that time. The prior language established a stronger commitment; the updated language is more permissive. No specific consumer action is required; the change is informational regarding WhatsApp's future flexibility on advertising formats.
View change record →The updated terms no longer state that WhatsApp has no intention to introduce ads in Status and Channels. Instead, the revised language indicates that if ads are introduced in these features, WhatsApp will update its privacy policy to reflect the change. This means the company has reserved the option to add ads to Status and Channels in the future, subject to policy update notification.
View change record →Removal of explicit GDPR rights provision (access, rectification, portability, erasure, objection rights) from the main policy may create compliance gaps or shift these rights to separate documentation.
View full change record →EU and UK users can exercise formal legal rights to access, correct, delete, or export their WhatsApp data, and can object to processing based on legitimate interests; these rights are enforceable through the Irish Data Protection Commission if WhatsApp does not respond adequately.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
"If you are a WhatsApp user located in the European Region, you may access, rectify, port and erase your information, as well as the right to restrict and object to certain processing of your information. This includes the right to object to our processing of your information for direct marketing and the right to object to our processing of your information where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party.Excerpt from WhatsApp's Privacy Policy
REGULATORY LANDSCAPE: This provision directly reflects rights established under GDPR Articles 15 through 22, including access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20), and objection (Article 21).
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
These rights, enforceable under GDPR, give EU and UK users meaningful control over their personal data held by WhatsApp, including the ability to object to data processing for purposes beyond core service delivery.
EU and UK users can exercise formal legal rights to access, correct, delete, or export their WhatsApp data, and can object to processing based on legitimate interests; these rights are enforceable through the Irish Data Protection Commission if WhatsApp does not respond adequately.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.