hey WhatsApp announced, last Tuesday (8/24), that it would change its privacy policy in Brazil. The intention is to respond to appeals from various bodies and entities that saw vulnerabilities in the Facebook group sharing WhatsApp user data with other companies.
The company said it worked closely with bodies such as the National Data Protection Authority (ANPD), the Administrative Council for Economic Defense (CAD), the Federal Ministry of Public Affairs (MPF) and the National Consumer Secretariat (SENACON). Over the course of three months, everyone involved worked to adjust WhatsApp’s privacy policy to bring it in line with the General Data Protection Act (LGPD).
Read more: The transparency of the new “WhatsApp Privacy Policy” has been questioned
According to the ANPD, WhatsApp, the public agency responsible for ensuring the LGPD’s application, must submit a new document on its policy by August 31. Later, the company will meet with the four bodies to analyze these points and define the next steps.
WhatsApp had already suspended its deadline for accepting the new terms of service for ninety days. Further, it defines that no user’s account shall be suspended or deleted within this period. Subsequently, the Company notified that no user account will be suspended or deleted due to changes to the Terms of Service and Privacy Policy after ninety days.
whatsapp needs to be changed
Also according to ANPD, WhatsApp already understood that its policy, which was reformed in early 2021, was not transparent enough for the user. This understanding was communicated in the first round of negotiations with the bodies, based on the technical points of the document submitted by the ANPD.
Following a new technical note from the authority, WhatsApp indicated that it intends to round out the points. Specifically, the adjustment of the privacy notice for Brazil to reflect transparency practices, which the company must already be compatible with for users in the European Union – which also has the same data law as the LGPD.
You might also like:
The terms regarding WhatsApp Business should also be updated. In addition, at the request of the ANPD, the company must prepare impact reports and other documents requested by the body, organize internal control mechanisms and other duties that the ANPD does not specify.
WhatsApp has also made progress in easing access to your data manager (DPO), a professional who is in charge of communicating with the company ANPD. The agency also stated that the exercise of rights by the holder was facilitated. Lastly, the app has committed to developing educational materials for data holders on the safe use of the app.
What was WhatsApp data policy?
When the messaging app introduced its new privacy policy and terms of use in February this year, there was no indication that WhatsApp would read conversations from users of the app. What happens is that information about the user, such as the number of contacts, IP and telephone numbers, along with other data, can be shared between Facebook companies.
The measure did not please users, as it was unclear what exactly would be shared. Experts from KR Advogados also point out that companies using WhatsApp Business will have access to this information and even banking transactions. In addition, the Facebook group also refers to the broad and general sharing of personal information among all companies, which has been happening since 2016.
Another problem is that interactions between people and companies using WhatsApp Business and who have hired third parties to manage their communications are not end-to-end encrypted, experts point out. This is because the intermediary, which could be Facebook itself, needs access to the conversation in order to “provide a service” to the company.
Concerns were about how and for what purposes Facebook would use this data. This is the reason why so many bodies and institutions do not agree with WhatsApp’s lack of transparency and pressed for change. Now hopefully the new document, scheduled for this month, will fill in these privacy gaps.
*With information from ANPD.
