Published on: 22nd April 2026
Authored by: Kartikey Thapliyal
Jagannath Vishwa Law College
CASE DETAILS
Case Name: WhatsApp LLC & Meta Platforms Inc v Competition Commission of India
Bench (CCI): Competition Commission of India — Multi-member Collegium
Bench (NCLAT): Justice Ashok Bhushan (Chairperson) and Arun Baroka (Technical Member)
CCI Order: 18 November 2024
NCLAT Judgment: 4 November 2025
Current Status: Appeals filed in the Supreme Court of India (January 2026); Meta directed to comply with user consent and withdrawal mechanisms by 16 March 2026
FACTS AND LEGAL ISSUES
In January 2021, WhatsApp LLC — a controlled company of Meta Platforms Inc. — weakened its privacy regulations for nearly 500 million Indian users[1]. The 2021 Data Protection Policy did something its 2016 antecedent had not presumed: it put an end to the opt-out. Consumers were tackled with a clear-cut distinction — consent to mass-market information sharing across every Meta system or forfeit access to the infrastructure. Mobile numbers, device identifiers, utilization patterns, location information, and all of it became compulsory currency for the continuation of their services.
This was not an ordinary system upgrade. It was a commercial strategy. Meta’s online virtual advertising market was supported by acquiring extremely detailed behavioural data. The Competition Commission of India saw through the façade, taking suo motu cognisance and publishing a prima facie order on 24 March 2021 under Section 26(1) of the Competition Act, 2002. Two unconventional objections were coupled with the investigation. WhatsApp and Meta’s judicial counter-attack — writ petitions before the Delhi High Court, a Letters Patent Appeal, and an appellate petition — was extensively denied on all grounds, with the Supreme Court barring further litigation on 14 October 2022.
The judicial interrogations were precise. Did the CCI have authority to investigate data practices under competition law, or did the Information Technology Act, 2000 and the Digital Data Protection Act, 2023 operate in entirely separate domains? Did the 2021 programme guidelines amount to a misuse of WhatsApp’s dominant position via unfair conditions under Section 4(2)(a)(i)? Did it restrict market access to rivals under Section 4(2)(c)? And did Meta leverage WhatsApp’s OTT dominance into the online advertising market under Section 4(2)(e)?
ARGUMENTS OF THE PARTIES
WhatsApp & Meta (Appellants)
The appellants argued with authority, disputing that data privacy belongs entirely within the domain of specialised regulation, not competition law. The 2021 scheme, they asserted, was not significantly distinct from its 2016 antecedent, which had passed regulatory scrutiny. A formal withdrawal option was already present; consumers retained meaningful choice.
Their primary contention was economic: data is non-rivalrous — Meta’s collection does not diminish anyone else’s stock. Rivals can generate their own datasets; TikTok’s global rise was cited as evidence that data-rich incumbents can be challenged. The CCI’s investigation, the appellants argued, relied on hypothetical harm with no demonstrated market foreclosure and no observable consumer injury. The five-year prohibition on promotional data sharing was excessively burdensome for a complementary platform and disproportionate by any standard.
Competition Commission of India (Respondent)
The CCI set clear boundaries: it was not adjudicating privacy violations. It was examining the competitive implications of data practices adopted by a dominant firm. Overlapping jurisdiction between the CCI and sectoral regulators, as recognised in Competition Commission of India v Bharti Airtel Ltd, justified the investigation.
The CCI rooted the economic value of personal data in the fundamental right to privacy recognised in Justice K.S. Puttaswamy (Retd.) v Union of India, and articulated the case’s central proposition: privacy is a parameter of non-price competition in zero-price digital markets. When a dominant platform degrades data protection as a condition of access, it imposes an unfair condition under Section 4(2)(a)(i).
On market structure, the CCI argued that WhatsApp’s data-sharing with Meta created structural entry barriers for competitors, amounting to denial of market access under Section 4(2)(c) and leveraging under Section 4(2)(e).
JUDGMENT
CCI Order — 18 November 2024
The CCI’s final order under Section 27 found violations under Sections 4(2)(a)(i), 4(2)(c), and 4(2)(e). The penalty: INR 213.14 crore imposed on Meta. Remedial directions included a five-year injunction on advertising-related data sharing with Meta-affiliated entities, mandatory public disclosures, and user opt-out options through UI controls.
NCLAT Judgment — 4 November 2025
The NCLAT issued a 184-page judgment — conclusive where it agreed, and carefully reasoned where it diverged. Jurisdiction was upheld without exception: privacy law and competition law coexist; the CCI’s jurisdiction is not ousted by data protection regulation. The finding of abuse under Section 4(2)(a)(i) was affirmed — in a market characterised by strong network effects, exit is practically illusory for 500 million users, making non-negotiable data policies inherently unfair.
However, Section 4(2)(e) was set aside. The provision requires the same enterprise to hold dominance in one market and leverage it into another. WhatsApp operates in OTT communications; Meta operates in digital advertising. As legally distinct entities, the requirement of a single economic entity exercising dominance across markets was not satisfied.
The five-year data-sharing prohibition was struck down on grounds of proportionality. However, on clarification, the NCLAT held that user consent and withdrawal requirements would continue to apply to advertising-related data sharing. The core consumer protection framework was thus preserved through alternative mechanisms. The INR 213.14 crore penalty remained unchanged.
RATIO DECIDENDI
A dominant digital platform abuses its position when it deprives users of meaningful choice through mandatory data-sharing conditions, thereby distorting competitive parity. Privacy is a legally relevant parameter of competition in zero-price digital markets. Its erosion by a dominant enterprise can constitute abuse under competition law, independent of and parallel to data protection regulation.
CRITICAL ANALYSIS
This case effectively closes a long-standing regulatory gap. For years, dominant digital platforms could frame anti-competitive data practices as mere privacy concerns, thereby escaping competition scrutiny. That position is no longer tenable.
The CCI’s approach mirrors the reasoning of the German Bundeskartellamt in its 2019 Facebook decision, later affirmed by the Court of Justice of the European Union in Meta Platforms Inc. v. Bundeskartellamt—that competition law extends to data practices that distort market conditions. While institutional frameworks differ, the doctrinal convergence is evident.
The jurisdictional clarity is the most enduring contribution of this case. By grounding its intervention in competitive harm rather than privacy violations per se, the CCI delineated its authority without encroaching upon the domain of data protection regulators. Any future attempt by dominant platforms to shield data practices behind privacy frameworks will now face direct competition law scrutiny.
The reversal of the five-year data-sharing prohibition remains the most contested aspect. Proportionality is a sound legal principle — remedies must align with the harm caused. However, the NCLAT’s retention of consent-based safeguards ensures that users retain meaningful control. The deterrent effect is diluted, but consumer protection persists. This is a calibrated compromise rather than a definitive resolution.
REFERENCES
[1] WhatsApp LLC & Meta Platforms Inc v Competition Commission of India (SM Case No. 01 of 2021, CCI, 18 November 2024)
[2] Competition Commission of India v Bharti Airtel Ltd
[3] Justice K.S. Puttaswamy (Retd.) v Union of India
[4] German Bundeskartellamt Facebook Decision (2019)
[5] Meta Platforms Inc v Bundeskartellamt
