Mervinskiy 437

Page 221

other words, this is neither an aggravating factor nor a mitigating one for the purpose of the within assessment.

Article 83(2)(k): any other aggravating or mitigating factor applicable to the circumstances of the case, such as financial benefits gained, or losses avoided, directly or indirectly, from the infringement 785. The relevant considerations arising under this heading are as follows: a. WhatsApp does not charge users in the context of the Service. b. The Article 14 infringement relates to the processing of non-user data pursuant to the activation, by users, of the Contact Feature. According to WhatsApp393, the Contact Feature is a “popular” voluntary feature of the Service. Non-user data is processed by way of the Contact Feature so as to be able to “quickly and conveniently update [a user’s] contacts list on the Service as and when any of those non-users join the Service394.” In this way, the Contact Feature envisages, and is directed to facilitating, the continued growth of WhatsApp’s userbase. c.

While the continued growth of WhatsApp’s user-base will not necessarily result in a direct financial benefit in the form of new subscription fees, it will increase WhatsApp’s presence on the market and thereby potentially increase its value. I note, in this regard, the information provided in the Facebook FAQ395, that: “We can also count how many unique users WhatsApp has … . This will help WhatsApp more completely report the activity on our service, including to investors and regulators.” [emphasis added]

d. The question that arises, therefore, is whether or not a more transparent approach to the data protection issues arising in the context of the Contact Feature would have a positive, negative or neutral effect on the continued growth of WhatsApp’s user base. I expressed the view, in the Supplemental Draft, that a more transparent approach to the Contact Feature would represent a risk factor for the continued growth of WhatsApp’s user base in circumstances where existing and prospective users might be encouraged, by concerned non-users, to opt for an alternative service that does not process the personal data of non-users. WhatsApp’s Response and Assessment of Decision-Maker 786. In response, WhatsApp submits396 that the “reasoning that a more transparent approach would represent a risk factor to the continued growth of WhatsApp’s user base is not supported by any evidence, and appears to be based on a number of incorrect assumptions.”. It submits, in this regard, that: a. No account appears to have been taken of the fact that users themselves are free to choose whether or not to use the Contact Feature as part of the Service.

393

Response to Investigator’s Questions, WhatsApp’s answer to question 3 Response to Investigator’s Questions, WhatsApp’s answer to question 3a. 395 Available at https://faq.whatsapp.com/general/26000112/?eea=1 (the “Facebook FAQ”) 396 The Supplemental Draft Submissions, paragraphs 15.2 to 15.6 (inclusive) 394

221


Turn static files into dynamic content formats.

Create a flipbook

Articles inside

The Decision-Making Stage

2hr
pages 143-220

Article 83(5) and the applicable fining “cap”

14min
pages 248-256

Decision: Whether to impose an administrative fine and, if so, the amount of the fine

18min
pages 225-237

Appendix C – Terms of Order to bring processing operations into compliance, made pursuant to Article 58(2)(d

3min
pages 264-265

Summary of Corrective Powers to be Exercised

0
pages 257-258

Article 83(2)(k): any other aggravating or mitigating factor applicable to the circumstances of the case, such as financial benefits gained, or losses avoided, directly or indirectly, from the infringement

10min
pages 221-224

Assessment: Article 13(2)(a) – Retention Criteria/Retention Periods

2min
page 128

Assessment: Article 13(2)(b) – the existence of the data subject rights

2min
page 132

Assessment of Decision-Maker: What information has been provided?

2min
page 129

Identified Legal Basis 5: The vital interests of the data subject or those of another person

2min
page 110

Assessment of Decision-Maker: What information has been provided?

2min
page 124

Assessment: Article 13(1)(f) – Transfers of personal data to a third country

2min
page 123

Assessment of Decision-Maker: What information has been provided?

1min
page 120

Identified Legal Basis 6: Tasks carried out in the public interest

8min
pages 111-113

Identified Legal Basis 1: Contractual Necessity

17min
pages 94-99

Identified Legal Basis 2: Consent

5min
pages 100-101

Identified Legal Basis 4: Compliance with a Legal Obligation

11min
pages 106-109

Identified Legal Basis 3: Legitimate Interests

10min
pages 102-105

Preliminary Issue: What information must be provided pursuant to Article 13(1)(c)?

26min
pages 82-92

Assessment: Application of the Proposed Approach to Article 13(1)(c

2min
page 93

Review of the Materials being relied upon by WhatsApp

10min
pages 64-67

Assessment: Article 13(1)(c) – the purposes of the processing for which the personal data are intended as well as the legal basis for the processing

7min
pages 79-81

Assessment of Decision-Maker: What information has been provided?

1min
page 76

Methodology for Part 2: Assessment and Questions for Determination

19min
pages 68-74

Relevant Provisions

4min
pages 62-63

Assessment: Article 13(1)(a) – the identity and contact details of the controller

2min
page 75
Issuu converts static files into: digital portfolios, online yearbooks, online catalogs, digital photo albums and more. Sign up and create your flipbook.