Introduction:
In a significant development in the ongoing debate between data privacy, market dominance, and competition law, the National Company Law Appellate Tribunal (NCLAT) on Tuesday delivered its much-awaited verdict in the appeal filed by Meta Platforms Inc. and WhatsApp LLC against the order of the Competition Commission of India (CCI) concerning WhatsApp’s 2021 privacy policy update. The case titled WhatsApp LLC v. CCI with Meta Platforms Inc. v. CCI (Competition App (AT) No. 1 of 2025) marks an important juncture in India’s evolving digital competition landscape, where questions of user data, consent, and dominance intersect with business practices of global technology giants. The two-member bench, consisting of Chairperson Justice Ashok Bhushan and Technical Member Arun Baroka, upheld the Rs 213.14 crore penalty imposed by the CCI on WhatsApp and Meta but set aside the crucial finding that Meta had leveraged WhatsApp’s dominant position in the online messaging market to gain an undue advantage in the online display advertising sector. The tribunal also quashed the five-year restriction imposed by the CCI that prohibited WhatsApp and Meta from sharing user data for advertising purposes. However, the rest of the CCI’s directions, including user transparency obligations and opt-out provisions, were upheld, thereby maintaining a delicate balance between protecting consumer choice and allowing innovation within the competitive framework of the digital economy.
Arguments of the Appellants (Meta Platforms Inc. and WhatsApp LLC):
Meta and WhatsApp advanced several key arguments during their appeal before the NCLAT. The foremost contention was that the CCI had exceeded its statutory jurisdiction by venturing into issues of privacy and data protection, which fall squarely within the domain of the Information Technology Act, 2000 and the recently enacted Digital Personal Data Protection Act, 2023, rather than under the purview of competition law. The appellants argued that the CCI’s investigation, though initiated under Section 4 of the Competition Act, 2002, was effectively assessing privacy violations and user consent issues rather than determining anti-competitive conduct. This, according to them, represented a serious case of jurisdictional overreach.
They further contended that WhatsApp’s 2021 privacy policy update did not constitute an “imposition” within the meaning of Section 4(2)(a)(i) of the Competition Act, as the terms of service were standard contractual conditions applicable to all users uniformly and did not restrict consumer choice in a competition law sense. Meta also argued that there was no leveraging of WhatsApp’s dominant position to unfairly benefit Meta’s online advertising business, emphasizing that both entities operated in distinct and non-overlapping markets—one being the Over-The-Top (OTT) messaging market and the other being the online display advertising market.
Further, Meta asserted that the CCI’s order was speculative and lacked evidence-based findings to establish a causal link between WhatsApp’s user base and Meta’s advertising revenues. They highlighted that users had the freedom to choose alternative messaging platforms such as Telegram, Signal, and iMessage, thereby negating any claim of consumer captivity or market abuse. In addition, WhatsApp pointed out that its platform remains free to use, and its data-sharing policies were designed to improve service quality, safety, and integration across Meta’s family of applications, not to coerce users or distort market competition.
Meta and WhatsApp also placed reliance on precedents from both Indian and international competition law to argue that data sharing per se cannot be equated to abuse of dominance unless it results in exclusionary or exploitative conduct in the relevant market. They emphasized that in the absence of tangible harm to competitors or consumers, the mere act of data integration does not attract competition law penalties. Therefore, the appellants sought complete quashing of the CCI’s order, including the monetary penalty and the five-year prohibition on data sharing.
Arguments of the Respondent (Competition Commission of India):
The Competition Commission of India, on the other hand, robustly defended its order and argued that the appeal was devoid of merit. The CCI maintained that its findings were firmly grounded in the framework of the Competition Act, 2002 and not in data protection laws. According to the CCI, WhatsApp’s 2021 privacy policy update, which mandated sharing of user data with Meta companies without offering an opt-out mechanism, amounted to an unfair and unreasonable imposition on users, falling squarely within the ambit of Section 4(2)(a)(i) of the Act.
The CCI contended that WhatsApp held a dominant position in the Indian OTT messaging market, with a market share exceeding 90% and an active user base surpassing 400 million. This dominance, when coupled with the policy’s coercive nature, created an environment where users were forced to either accept the new data-sharing terms or lose access to an essential digital communication service. This, the Commission argued, was a textbook case of exploitative abuse of dominance, where the dominant enterprise imposes unfair conditions on consumers who have limited ability to switch due to network effects and interoperability barriers.
Moreover, the CCI argued that the integration of WhatsApp’s vast user data with Meta’s advertising systems provided Meta with an unparalleled competitive advantage in the online advertising market, allowing it to target ads more precisely than rivals. This, according to the Commission, constituted “leveraging” of dominance under Section 4(2)(e) of the Act, which prohibits using dominance in one market to enter or protect position in another market. The CCI maintained that the evidence presented, including Meta’s internal documents and market behavior, demonstrated a strategic plan to consolidate power across multiple digital ecosystems by using WhatsApp’s user data as an entry barrier for competitors.
The CCI further justified the imposition of a Rs 213.14 crore penalty as being proportionate and necessary to deter future violations, emphasizing that Meta and WhatsApp, being global entities with significant financial strength, must be held accountable for their conduct within India’s jurisdiction. Regarding the five-year data-sharing restriction, the Commission stated that it was essential to restore competitive neutrality and prevent irreversible damage to the digital advertising ecosystem during the period of regulatory realignment. The CCI rejected the appellants’ claim of jurisdictional overreach, asserting that competition law and data protection law can coexist and operate concurrently where market power is exercised through control over user data.
Court’s Judgement:
After detailed hearings and consideration of extensive submissions from both sides, the NCLAT delivered a nuanced verdict that sought to strike a balance between regulatory oversight and business autonomy in the digital economy. The bench upheld the Rs 213.14 crore penalty imposed by the CCI, affirming that WhatsApp’s 2021 privacy policy update constituted an unfair imposition on users within the meaning of Section 4(2)(a)(i) of the Competition Act. The tribunal agreed that users were denied meaningful consent and choice, as the policy effectively compelled them to share their personal data with Meta companies to continue using WhatsApp. This, according to the NCLAT, amounted to exploitative conduct by a dominant entity.
However, the tribunal disagreed with the CCI’s finding that Meta leveraged WhatsApp’s dominance in the messaging market to strengthen its position in the online display advertising market. The bench observed that the CCI had not established a sufficiently clear causal connection or competitive harm resulting from such alleged leveraging. The tribunal held that while Meta’s access to user data might have enhanced its advertising capabilities, this alone did not constitute an abuse of dominance in the absence of demonstrable exclusionary or predatory behavior. Accordingly, the NCLAT set aside the CCI’s findings under Section 4(2)(e) of the Act.
Additionally, the tribunal quashed the direction contained in paragraph 247.1 of the CCI’s order, which prohibited WhatsApp and Meta from sharing user data for advertising purposes for a period of five years. The bench noted that such a blanket prohibition would disproportionately interfere with the companies’ business models and technological integration strategies, especially since the CCI’s own findings on leveraging were set aside. The NCLAT recalled that it had earlier stayed this specific direction in January 2025 to prevent disruption to WhatsApp’s free-to-use service, and in its final decision, it confirmed that the direction was legally unsustainable.
Despite this relief, the tribunal upheld the rest of the CCI’s directions aimed at enhancing user transparency and accountability. These include requirements that WhatsApp must clearly inform users about what categories of data are shared with other Meta entities, the purpose of such sharing, and the lawful basis for processing. The tribunal also directed that users should be provided with an opt-out mechanism and the ability to modify their consent choices at any time.
In its reasoning, the NCLAT emphasized that while data is an important competitive asset in digital markets, competition law enforcement must remain focused on ensuring fair market conduct rather than regulating privacy or data governance per se. The bench acknowledged that the Digital Personal Data Protection Act, 2023 establishes a comprehensive framework for user consent, purpose limitation, and data processing obligations, and therefore, issues relating solely to privacy and data protection must primarily be addressed under that legislation. Nevertheless, the tribunal noted that where misuse of data contributes to distortion of competition, the CCI retains jurisdiction to intervene under the Competition Act.
Summarizing its decision, the NCLAT held: “The findings of the Commission so far as they relate to Section 4(2)(e) and the direction in paragraph 247.1 are set aside. The rest of the order is upheld.” This formulation preserved the CCI’s authority over unfair trade practices while circumscribing its jurisdiction concerning cross-market leveraging theories unsupported by empirical evidence.
The judgment is likely to have far-reaching implications for India’s digital competition regime, particularly in cases involving large technology platforms that operate across multiple interconnected markets. By affirming the penalty and transparency requirements while removing the leveraging and data-sharing bans, the NCLAT effectively reaffirmed the principle that competition law should address tangible competitive harms without encroaching upon the domain of data privacy regulation.