8 Total
2 High severity
5 Medium severity
1 Low severity
Summary

This document establishes the terms of service for WhatsApp, a messaging and communications platform operated by Meta. The agreement authorizes WhatsApp to collect and process phone numbers, contacts lists, usage activity, device identifiers, and location-related data, and permits sharing of such information with Meta's family of companies. For users in the United States, the terms require that disputes be resolved through individual arbitration and specify that class action proceedings are not permitted.

Technical / Legal Breakdown

This document governs the contractual relationship between WhatsApp LLC (or WhatsApp Ireland Limited for users outside the US and Canada) and users of WhatsApp messaging, calling, and related services, establishing the legal basis for use of the platform. The agreement states that users must be of minimum age (16 in the EU/EEA, 13 elsewhere, or higher where local law requires), that continued use of the service constitutes acceptance of the terms, and that WhatsApp is authorized to collect usage data, account information, device identifiers, and information about contacts uploaded by users to provide and improve the service. The terms authorize WhatsApp to share data with the broader Meta Companies family of products for purposes including safety, security, and business operations, and grant WhatsApp a license to host, reproduce, and distribute user-provided content to the extent necessary to operate the service. The agreement engages GDPR and ePrivacy frameworks for EU/EEA users (with WhatsApp Ireland Limited as the data controller), CCPA for California residents, and general FTC Act jurisdiction for US users regarding unfair or deceptive practices. Material compliance considerations include the Meta data-sharing provisions, which have been subject to regulatory scrutiny by the Irish Data Protection Commission under GDPR, and the arbitration clause applicable to US users that requires individual dispute resolution and includes a class action waiver.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

1 important change detected

2 versions captured · Last updated: May 2026

What changed Meta offered rival AI chatbots one month of free access to WhatsApp while negotiating with EU regulators. This follows an outright ban on third-party AI chatbots in January, a paid-access reversal in March, and now free temporary access under Digital Markets Act enforcement pressure.
Why this matters Meta offered rival AI chatbots free access to the WhatsApp Business API for one month in the European Economic Area. This follows EU regulatory pressure under the Digital Markets Act. The outcome of ongoing negotiations will determine whether third-party AI chatbot access becomes permanent, paid, or restricted.
View full change record →
High — 2 provisions
Medium — 5 provisions
Low — 1 provision

Monitoring

WhatsApp has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Class Action Waiver and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:13 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000175
Version ID CA-V-000721
SHA-256 f82c9114889ded0eafefbe16e7749a763a3e9668941a5280ff46f0c9967572f8
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans