The Remedial Paradox in CCI v. WhatsApp: Losing on Leveraging May Produce Better Digital Competition Enforcement

[Pranshu is a student at National Law University Delhi.]

WhatsApp was asked file a compliance affidavit on 16 March 2026 with the Competition Commission of India (CCI) to certify that it has restructured its data-sharing practices in accordance with the remedial directions upheld by the National Company Law Appellate Tribunal (NCLAT). This indicates a tipping point in a case that began in 2021, when the CCI took suo motu cognisance of WhatsApp’s updated privacy policy and culminated in one of the largest penalties imposed for abuse of dominance on a technology company in India at INR 213.14 crore.

This post analyses the developments that have followed the NCLAT’s initial interim stay of January 2025: the NCLAT’s final judgment of 4 November 2025, the critical clarification order of 15 December 2025, and the Supreme Court proceedings of 23 February 2026, to argue that NCLAT’s split outcome has paradoxically created a perpetual framework for WhatsApp that could prove to be more durable and effective than the CCI’s original prescription.

The Split Outcome

The Tribunal in NCLAT’s final judgment confirmed that WhatsApp’s 2021 privacy policy imposed unfair terms in breach of Section 4(2)(a)(i) of the Competition Act 2002 and that the “take-it or leave-it” regime of consent gave users no real choice in a market characterised by significant network effects and high switching costs. Moreover, the Tribunal upheld the Section 4(2)(c) finding that the application of cross-platform data sharing practices by WhatsApp may create barriers to entry that amount to a denial of market access.

However, the NCLAT departed sharply from the CCI on the question of leveraging under Section 4(2)(e). The CCI had found that Meta used WhatsApp’s dominance in the over-the-top messaging market to strengthen its position in the separate market for online display advertising by transferring data about WhatsApp users to Meta’s advertising infrastructure. Notably, the NCLAT did not set aside this finding for lack of evidence. In fact, the Tribunal agreed with the CCI’s qualitative analysis that the conduct caused immense anti-competitive harm. Nevertheless, the leveraging charge was dismissed on strict statutory technicality: The parties were determined to be different legal entities. Accordingly, the Tribunal found that Section 4(2)(e)’s requirement of intra-Enterprise leveraging across markets did not apply to a parent-subsidiary relationship, while not questioning Meta’s complete ownership of WhatsApp.

As a result, the monetary penalty of INR 213.14 crore was maintained. However, the key remedy which targeted cross-market data aggregation, i.e. a blanket prohibition for five years on the transfer of WhatsApp user data to Meta affiliated entities for advertising purposes, was rejected. The Tribunal noted a lack of justification for the temporal scope of the ban and found the restriction unnecessary considering the behavioural safeguards that it chose to maintain.

The Leveraging Gap

Traditional leveraging analysis, as it has developed in the context of Indian competition law, presupposes a relatively simple causal link: a dominant firm operating in Market A exercises its market power to gain an identifiable competitive advantage in Market B, to the detriment of competitors in the latter market. This tracks with industrial-era situations, when a preeminent upstream supplier conditions access to an unrelated downstream product.

Data-driven platform ecosystems, on the other hand, operate differently, wherein the competitive harm from cross-platform data aggregation is structurally different. It is diffuse and often self-reinforcing, rather than being discrete or isolable. The advantage of WhatsApp user data to Meta’s advertising business then does not come out as a single identifiable act of leveraging that could be traced to a particular competitive outcome, but as gradual compounding of informational advantage, including but not limited to richer user profiles, more precise ad targeting, and higher advertiser willingness-to-pay. The gap between Meta and its competitors may be practically irreversible by the time this advantage becomes empirically measurable.

The NCLAT’s evidentiary standard is doctrinally defensible as a matter of statutory interpretation. Section 4(2)(e) does require a nexus between markets. But it may be practically unworkable in digital markets where harm resists the neat causal proof that leveraging doctrine traditionally demands. The CCI attempted to bridge this gap by relying on the Bundeskartellamt’s 2019 Facebook decision and the CJEU’s subsequent endorsement in Meta Platforms v. Bundeskartellamt. But the NCLAT evidently required more than theoretical possibilities.

This evidentiary gap raises an inquiry as to whether Section 4(2)(e), as currently interpreted, is fit for purpose in regulating platform ecosystems where cross-market effects operate through data flows rather than through the traditional tying, bundling, or refusal-to-deal mechanisms that leveraging doctrine was designed to address. It is, notably, the kind of gap that the draft digital bill’s proposed ex ante framework, which would impose obligations on designated “systemically significant digital enterprises” without requiring proof of competitive harm, is designed to fill.

The Remedial Paradox

Here, however, lies the paradox. The remedy that fell with the leveraging finding was the five-year blanket ban on advertising-related data sharing (paragraph 247.1 of the CCI order; quoted). The remedies that survived are the user-choice safeguards under Paragraph 247.2. These require WhatsApp to provide users with clear, purpose-specific disclosures for each category of data shared with Meta companies, to ensure that data sharing beyond core application uses is not a precondition for the platform, and to offer all users, including those who accepted the 2021 policy, a genuine opt-out mechanism, along with ensuring that all future policy updates comply with these transparency and choice requirements.

Designed as a blunt, temporally constrained instrument, the five-year prohibition was designed to prevent the sharing of data about advertising until it would expire in 2029, at which point, the theory went, Meta could start sharing such data again, but under conditions that could be no more transparent than before the intervention. The newer framework, in contrast, creates a permanent structural obligation, landing WhatsApp in a position where it is to constantly justify every category of data sharing and give users a meaningful ability to refuse data sharing.

The test of this logic came on 15 December 2025, when the NCLAT issued a clarification order on an application by the CCI. The November judgment, in striking down the five-year ban, had inadvertently displaced the phrase “except paragraph 247.2.1,” creating an accidental gap. The CCI moved for clarification, and the NCLAT agreed, confirming that the remedial directions in paragraphs 247.2.1 through 247.2.4 apply to “WhatsApp user data collection and sharing for all non-WhatsApp purposes, including non-advertising and advertising purposes.” The Tribunal granted WhatsApp three months to comply, the deadline that now falls on 16 March 2026.

The December clarification is consequential not just to remove the lacuna of procedure but also to shed light on the remedial doctrine of the NCLAT. The Tribunal explicitly held that WhatsApp “cannot assert unilateral or open-ended rights over user data,” and that restoring opt-in and opt-out choices removes the exploitative character of the 2021 policy. Clearly, data sharing is not being prohibited but only being conditioned on informed, revocable consent. Such approach is more nuanced than a temporal-limited ban, and is more harmonious to the emerging international consensus as illustrated by the EU’s Digital Markets Act and the CJEU’s decision as to Meta Platforms v. Bundeskartellamt.

Voluntary Compliance and Pending Proceedings

The Supreme Court hearing of 23 February 2026, before a bench led by Chief Justice Surya Kant, brought an unexpected denouement. Senior Advocate Kapil Sibal, appearing for WhatsApp, informed the bench that the company would comply with the NCLAT’s directions by March 16 and withdrew the stay applications. The bench dismissed the applications, though without prejudice to the issues in the main appeal.

The company seems to have weighed the burden of a consent-based structure against the judicial and reputational costs of further opposition, especially following the observation of the CJI that the Court will in no way permit the rights of any citizen of this country to be impaired. Alternatively, Meta may have realized a cynical truth: regardless of the volume and nature of disclosures, users will likely pay little or no attention to them. However, the principal appeals persist. Meta is challenging the abuse results and fine, but the cross-appeal to the CCI is aimed at the restriction of the five-year advertisement information ban to be reinstated. If the Supreme Court were to uphold the existing framework while also restoring the ban, India would have arguably the most aggressive data-sharing remedy in any jurisdiction; a consent framework overlaid with a temporal prohibition.

Conclusion

WhatsApp and NCLAT ended up swapping a finite, predetermined prohibition for a permanent and structural cage, and this supposed victory of avoiding a five-year ban has left WhatsApp tethered to a perennial consent regime that effectively has no expiry date. Still, the failure to reconcile Section 4(2)(e) with the materialities of data-driven ecosystems leaves a chasm that future legislations, hopefully the Digital Competition Bill, must seek to bridge.  

Certainly, March 16’s affidavit is a procedural end, but the substantial battle has shifted from the courtroom to the interface. NCLAT’s reasoning’s flaw lies in its assumption that an opt-out mechanism equates to a meaningful choice. In a market that is defined by network lock-in, the “take-it-or-leave-it” dynamic persists. There may now be buttons to press for the users, but without genuine competitors to switch to, the captivity that the regulator sought to dismantle continues to confine. It can be argued that this is not the prerogative of the NCLAT, however, it must also be acknowledged that if the law can regulate the data extraction process, attempts can be made to address the power dynamic that makes such extraction inevitable.