Finally, on 28 July 2021, the European Data Protection Board (EDPB) adopted a binding decision and notified the DPC. This decision contained a clear instruction that required the DPC to reassess and increase its proposed fine on the basis of a number of factors contained in the EDPB’s decision.
Following this reassessment, the DPC imposed a fine of €225 million on WhatsApp. In addition to the imposition of an administrative fine, the DPC also imposed a reprimand along with an order for WhatsApp to bring its processing into compliance by taking a range of specified remedial actions.
WhatsApp has criticized the DPC decision and said the fine was “entirely disproportionate.” It has vowed to appeal the decision.
“We disagree with the decision today regarding the transparency we provided to people in 2018 and the penalties are entirely disproportionate. We will appeal this decision,” a WhatsApp spokesperson said.
“WhatsApp is committed to providing a secure and private service. We have worked to ensure the information we provide is transparent and comprehensive and will continue to do so.”
