Ireland: Irish Data Protection Commission investigation into WhatsApp over alleged violations of GDPR
Progress
Scope
Timeline of events
Court of Justice of the European Union set aside General Court’s December 2022 dismissal and referred case back to General Court
On 10 February 2026, the Court of Justice of the European Union (CJEU) set aside the General Court’s 7 December 2022 dismissal and referred the case back to the General Court. The decision resolves an appeal lodged by WhatsApp Ireland in Case C-97/2…
SourceAdvocate General issued opinion advising setting aside General Court’s 2022 ruling dismissing WhatsApp’s challenge to European Data Protection Board’s decision
On 27 March 2025, the Advocate General issued an opinion in WhatsApp Ireland Ltd v European Data Protection Board (Case C‑97/23 P), recommending that the Court set aside the General Court’s 2022 decision which found WhatsApp’s annulment action inadm…
SourceWhatsApp appealed General Court’s December 2022 dismissal to Court of Justice of the European Union
On 17 February 2023, WhatsApp Ireland Ltd lodged an appeal with the Court of Justice of the European Union (CJEU) in Case C‑97/23 P, seeking to overturn the General Court’s (GC) order of 7 December 2022 in Case T‑709/21. The GC had dismissed WhatsAp…
SourceGeneral Court dismissed WhatsApp appeal of EUR 225 million fine adopted by EDPB
On 7 December 2022, the General Court of the European Union issued a statement dismissing an action brought by WhatsApp against a decision of the European Data Protection Board (EDPB) from 28 July 2021, in a matter referred by the Irish supervisory …
SourceData Protection Commission fined WhatsApp EUR 225 million for violations of GDPR user privacy rules
On 2 September 2021, the Irish Data Protection Commission (DPC) concluded its investigation into WhatsApp for violations of the General Data Protection Regulation (GDPR). The DPC sanctioned WhatsApp with a fine of EUR 225 million and further handed …
SourceEuropean Data Protection Board adopted binding decision (1/2021) resolving dispute concerning draft decision of Irish Supervisory Authority regarding WhatsApp Ireland's obligations under the GDPR
On 28 July 2021, the dispute over a draft decision made by the Irish Data Protection Commission (DPC) regarding WhatsApp IE's transparency obligations under the GDPR for both users and non-users of the service was resolved by the European Data Prote…
SourceData Protection Commission escalated resolution of data protection decision to European Data Protection Board in investigation into WhatsApp over alleged data breaches
On 3 June 2021, the Irish Data Protection Commission (DPC) escalated resolution of its data protection decision to the European Data Protection Board in the investigation into WhatsApp over alleged data breaches. Prior (24 December 2020), the DPC ha…
SourceData Protection Commission opened investigation into WhatsApp over alleged data breaches
On 10 December 2018, the Irish Data Protection Commission (DPC) opened an investigation into WhatsApp for allegedly violating the General Data Protection Regulation (GDPR). The DPC was made aware of these possible violations by several breach notifi…
Source