Home / Issues / Irish Data Protection Commission transparency finding against WhatsApp Ireland under the GDPR
Irish Data Protection Commission transparency finding against WhatsApp Ireland under the GDPR
Decidedas of 31 Oct 2026Ireland / European UnionWhatsApp Ireland Ltddraft
Current status
Confirmed fact · as of 2 Sep 2021
The DPC issued a binding decision on 2 September 2021 finding a GDPR transparency infringement and imposing a EUR 225 million fine, a reprimand and a compliance order.
A Data Protection Commission (Ireland), Data Protection Commission announces decision in WhatsApp inquiry (2 Sep 2021) · retrieved 31 Oct 2026
Confirmed fact · as of 31 Oct 2026
This is a data-protection regulatory decision under the GDPR, not a criminal conviction.
A Data Protection Commission (Ireland), Data Protection Commission announces decision in WhatsApp inquiry (2 Sep 2021) · retrieved 31 Oct 2026
Unanswered question · as of 31 Oct 2026
WhatsApp announced an intention to appeal; the current status and outcome of any appeal, and the completion of the ordered remedial actions, could not be confirmed from the primary records reviewed for this entry.
C RTÉ (Will Goodbody), Record €225m fine for WhatsApp Ireland over data protection breaches (2 Sep 2021) · retrieved 31 Oct 2026
Last reviewed 31 Oct 2026. An initial allegation is not the final event; this block is always shown.
How it unfolded
Issue raised · 2 Sep 2021
Proposition: The Irish Data Protection Commission examined whether WhatsApp Ireland had met its GDPR transparency obligations in the information it provided to users and non-users, including about the processing of data between WhatsApp and other Facebook (Meta) companies, during 2018.
Affected parties: WhatsApp Ireland Ltd, Data Protection Commission (Ireland), WhatsApp users and non-users
Originating record: A Data Protection Commission (Ireland), Data Protection Commission announces decision in WhatsApp inquiry (2 Sep 2021) · retrieved 31 Oct 2026
Response · WhatsApp Ireland Ltd · 2 Sep 2021
Attributed claim · as of 2 Sep 2021
A WhatsApp spokesperson said the company disagreed with the decision regarding the transparency it provided in 2018, described the penalties as 'entirely disproportionate', and said 'We will appeal this decision.' — WhatsApp Ireland Ltd
C RTÉ (Will Goodbody), Record €225m fine for WhatsApp Ireland over data protection breaches (2 Sep 2021) · retrieved 31 Oct 2026
Outcome · Data Protection Commission (Ireland), following a binding decision of the European Data Protection Board under Article 65 GDPR · 2 Sep 2021
official findingbinding
Confirmed fact · as of 2 Sep 2021
The Data Protection Commission announced a decision finding that WhatsApp Ireland had not discharged its GDPR transparency obligations, imposing an administrative fine of EUR 225 million together with a reprimand and an order to bring its processing into compliance through specified remedial actions. After the DPC could not reach consensus with eight concerned supervisory authorities, the European Data Protection Board adopted a binding decision on 28 July 2021 under Article 65 instructing the DPC to reassess and increase the proposed fine.
A Data Protection Commission (Ireland), Data Protection Commission announces decision in WhatsApp inquiry (2 Sep 2021) · retrieved 31 Oct 2026
Remedy: An administrative fine of EUR 225 million, a reprimand, and an order requiring WhatsApp to bring its processing into compliance through specified remedial actions.
Appeal/review: pending — WhatsApp stated on 2 September 2021 that it would appeal the decision. The outcome of any such appeal could not be confirmed from the primary records reviewed for this entry. C RTÉ (Will Goodbody), Record €225m fine for WhatsApp Ireland over data protection breaches (2 Sep 2021) · retrieved 31 Oct 2026
How to read this. Allegation, response and outcome are separate, dated records. "Decided/resolved" appears only where a cited outcome supports it. Materially affected parties can request a correction via Corrections & response.