South Africa's information regulator says WhatsApp cannot share users' contact information

JOHANNESBURG (Reuters) - Facebook Inc cannot share any contact information it collects from WhatsApp users in South Africa with its other properties without first obtaining authorisation from the country's Information Regulator (IR), the agency said on Wednesday.

In January, the Facebook-owned messaging platform WhatsApp informed users it was preparing a new privacy policy, under which it could share some data, including location and phone numbers, with Facebook and its other units such as Instagram and Messenger.[nL4N2KP10Q]

The move has sparked backlash among users in South Africa and elsewhere, and prompted many to opt for rival services such as Signal or Telegram.

"WhatsApp cannot without obtaining prior authorisation from the IR process any contact information of its users for a purpose other than the one for which the number was specifically intended at collection, with the aim of linking that information jointly with information processed by other Facebook companies," the regulator said.

The regulator said its decision was in accordance with section 57 of the Protection of Personal Information Act, South Africa's data protection law.

The agency also said that it has written to Facebook South Africa and outlined its concerns about the company's privacy policy.

NOW HERE IS WHERE THIS ARTICLE BECOMES INTERESTING:

A WhatsApp spokesperson said the company is reviewing the regulator's letter, adding that the update does not expand the company's ability to share data with Facebook, nor does it impact the privacy of users' messages with friends or family.

"WhatsApp does not share your contacts with Facebook and that policy applies to users everywhere, including in South Africa," the spokesperson added.

Originally Posted by WIRED
WhatsApp Has Shared Your Data With Facebook for Years, Actually
A pop-up notification has alerted the messaging app's users to a practice that's been in place since 2016.

When WhatsApp launched a major update to its privacy policy in August 2016, it started sharing user information and metadata with Facebook. At that time, the messaging service offered its billion existing users 30 days to opt out of at least some of the sharing. If you chose to opt out at the time, WhatsApp will continue to honor that choice. The feature is long gone from the app settings, but you can check whether you're opted out through the "Request account info" function in Settings.

Meanwhile, the billion-plus users WhatsApp has added since 2016, along with anyone who missed that opt-out window, have had their data shared with Facebook all this time. WhatsApp emphasized to WIRED that this week's privacy policy changes do not actually impact WhatsApp's existing practices or behavior around sharing data with Facebook.

https://www.wired.com/story/whatsapp-facebook-data-share-notification/

The regulator is also "very concerned" that citizens of the European Union will receive significantly higher privacy protection than people in South Africa and Africa generally.

"Our legislation is very similar to that of the EU. It was based on that model deliberately, as it provides a significantly better model for the protection of personal information than that in other jurisdictions," Chairperson of the IR Pansy Tlakula said.

"We do not understand why Facebook has adopted this differentiation between Europe and Africa," she said.

The changes to WhatsApp's privacy policy have come under scrutiny globally, with Turkey's competition board launching an investigation and a legal challenge filed in India.

https://www.reuters.com/article/uk-safrica-facebook-whatsapp-idUSKCN2AW0OB

Live and let live