France's National Data Protection Commission, the CNIL, has given WhatsApp Inc. one month to bring its user data-sharing practices with Facebook Inc. into compliance with the country's privacy laws.
The regulator found that WhatsApp is sharing its users' data with Facebook for "business intelligence" purposes, which violates France's Data Protection Act. It also noted that WhatsApp users must not only give consent to the processing of data on the platform, but also for Facebook's own accessory purposes such as improving its service.
"The only way to refuse the data transfer for 'business intelligence' purposes is to uninstall the application," the CNIL said.
The watchdog also noted that it has repeatedly asked WhatsApp to provide samples of the French users' data that it shares with Facebook. However, WhatsApp refused the request, saying it is based in the U.S. and is only covered by laws in that country.
The CNIL warned it could sanction WhatsApp if it failed to comply within the specified time period.
Facebook eventually stopped collecting data from WhatsApp users across Europe for advertising and product reasons, following pressure from EU privacy watchdogs.