WhatsApp will share your information with government authorities when legally required, and may also share it when the company believes disclosure is necessary to prevent harm or investigate violations of its own terms, even without a court order.
This analysis describes what WhatsApp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes the operational framework governing disclosure of user data outside normal service operations. It defines two categories of disclosure authorization: those mandated by legal process and those undertaken at WhatsApp's discretion based on stated justifications, each with different triggering criteria.
Interpretive note: The scope of the good faith exception and what internal process governs its application is not described in the policy, creating uncertainty about how broadly this provision is applied in practice.
The updated policy removes an unconditional statement of intent and replaces it with conditional language: 'We have no intention to introduce them, but if we ever do, we will update this Privacy Policy.' This revision reserves WhatsApp's right to introduce ad formats in Status and Channels in the future, subject only to updating the privacy policy at that time. The prior language established a stronger commitment; the updated language is more permissive. No specific consumer action is required; the change is informational regarding WhatsApp's future flexibility on advertising formats.
View change record →The updated terms no longer state that WhatsApp has no intention to introduce ads in Status and Channels. Instead, the revised language indicates that if ads are introduced in these features, WhatsApp will update its privacy policy to reflect the change. This means the company has reserved the option to add ads to Status and Channels in the future, subject to policy update notification.
View change record →The updated policy now explicitly discloses that users 'may see other types of ads in Status and Channels,' whereas the prior language stated WhatsApp had 'no intention to introduce' new ad types. This represents a shift from a stated commitment not to expand advertising toward an explicit acknowledgment that new ad categories may appear on WhatsApp's social features. The policy also updated its regional privacy guidance by removing a reference to Thai Personal Data Protection Act rights and adding a new section directing US residents to WhatsApp's United States Regional Privacy Notice for information about their consumer privacy rights under US law.
View change record →Your account data and metadata may be shared with law enforcement or other third parties not only when legally compelled but also when WhatsApp unilaterally determines that disclosure is necessary, which may occur without your knowledge or prior notice.
How other platforms handle this
We may receive information, including the following, from third party sources and combine it with information we already directly collect from you. We will handle the information in accordance with this Privacy Policy. Game, social media, or other information, from those third parties or services yo...
By using the Services, you authorize Affirm to share your information, including personal information and information related to your transactions and use of the Services, with merchants, service providers, and other third parties as further described in our Privacy Policy.
We may share your personal information with our affiliates, meaning entities that control, are controlled by, or are under common control with Consensys. We also share information with service providers who assist in operating our services, subject to confidentiality obligations.
Monitoring
WhatsApp has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We share information with law enforcement, government officials, or other third parties when: we are compelled to do so by a subpoena, court order, or similar legal procedure; we believe in good faith that the disclosure of information is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of our Terms of Service.— Excerpt from WhatsApp's WhatsApp Privacy Policy
REGULATORY LANDSCAPE: Voluntary disclosure of user data to law enforcement in the absence of legal process is a recognized area of policy concern and may implicate ECPA in the US, which governs voluntary and compelled disclosures of electronic communications by service providers. Under GDPR, disclosure to public authorities requires a legal basis under Article 6 and must be proportionate and limited to what is necessary. The policy's reference to good faith belief as a disclosure trigger may warrant evaluation under GDPR's necessity and proportionality requirements for EU users. GOVERNANCE EXPOSURE: Medium. The good faith disclosure provision is common in platform policies, but its breadth, encompassing financial loss prevention and terms violation investigations alongside physical harm prevention, extends beyond the narrowest formulations of voluntary disclosure authority. Users have no disclosed mechanism to challenge or receive notice of such disclosures. JURISDICTION FLAGS: EU/EEA users benefit from GDPR requirements that disclosures to public authorities be based on Union or member state law. UK users have equivalent protections under UK GDPR. US users have limited statutory protections against voluntary disclosures by private platforms beyond ECPA's floor provisions. Journalists, activists, and individuals in sensitive professional roles may face elevated risk from voluntary disclosure provisions. CONTRACT AND VENDOR IMPLICATIONS: Enterprises should be aware that WhatsApp may disclose communications metadata or account information to law enforcement based on its own internal assessment without the enterprise being notified, which may have implications for legal privilege, investigations, and regulatory reporting obligations. COMPLIANCE CONSIDERATIONS: Organizations deploying WhatsApp for sensitive business communications should assess whether voluntary disclosure provisions create unacceptable risk for privileged or confidential communications, and whether alternative encrypted communications platforms with narrower disclosure policies may be appropriate for specific use cases.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause establishes the operational framework governing disclosure of user data outside normal service operations. It defines two categories of disclosure authorization: those mandated by legal process and those undertaken at WhatsApp's discretion based on stated justifications, each with different triggering criteria.
Your account data and metadata may be shared with law enforcement or other third parties not only when legally compelled but also when WhatsApp unilaterally determines that disclosure is necessary, which may occur without your knowledge or prior notice.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by WhatsApp.