In a setback to the Facebook-owned messaging app WhatsApp, India's Ministry of Electronics and Information Technology (MEITY) has said in an affidavit that WhatsApp's new policy violates the Information Technology Rules, 2011.
The affidavit was submitted by the government to the Delhi High Court, asking it to restrain WhatsApp from implementing it.
"WhatsApp fails to specify types of personal data being collected, fails to notify user details of the collection of sensitive personal information; provide an option to review or amend information; provide an option to withdraw consent retrospectively and guarantee further non-disclosure by third parties," says the affidavit.
"Crucially, there is no distinction between personal data or sensitive personal data which is being collected," it added.
The Indian government has introduced the Personal Data Protection Bill, 2019. Once enacted, the law is envisioned to provide a well-defined policy to protect the privacy rights of Indian citizens.
"As we said in January when this matter was first raised, we wish to reinforce that this update does not expand our ability to share data with Facebook," says WhatsApp media statement post-MEITY submitted its affidavit.
"WhatsApp will always protect personal messages with end-to-end encryption so neither WhatsApp nor Facebook can see them. We are working to address misinformation and remain available to answer any questions."
The High Court had issued a notice to central government and WhatsApp last month in response to a petition challenging WhatsApp's new privacy rules and terms of service.
- India asks WhatsApp to withdraw the new service terms
- WhatsApp's new service terms annoy users in India
— Gagandeep Kaur, contributing editor, special to Light Reading