CNIL on its website said, "The company (WhatsApp) explained that it could not supply the sample requested by CNIL since it is located in the US, it considers that it is only subject to the legislation of this (US) country."
CNIL may issue sanctions against the company if WhatsApp doesn’t comply with the formal notice that mentions the specified time period. CNIL had asked WhatsApp to provide a sample of the French users’ data transferred to Facebook. However, CNIL on its website said, “The company (WhatsApp) explained that it could not supply the sample requested by CNIL since it is located in the US, it considers that it is only subject to the legislation of this (US) country.”
The company further added, “As a result, the Chair of the CNIL decided to issue a formal notice to the company WhatsApp to comply with the Data Protection Act within one month”.
WhatsApp was acquired by Mark Zuckerberg owned Facebook for $19 bn in 2014.
CNIL further added, “While the security purpose seems to be essential to the efficient functioning of the application, it is not the case for the ‘business intelligence’ purpose which aims at improving performances and optimising the use of the application through the analysis of its users’ behaviour”.
However, this is not the first incident where duo’s data sharing of the user has been condemned by other European nations as well. Germany had asked Facebook to stop collecting data from WhatsApp users. A German court this year upheld its decision asking Facebook to obtain the permission of WhatsApp users in the country before processing their personal data to the social media platform.
It was in UK where Facebook finally agreed to the people and agreed to stop collecting WhatsApp user data. The Supreme Court of India has also directed Whatsapp and Facebook to specify whether they were sharing the data with any third-party entity.