- Once users consent to the use their address book, all phone numbers from their mobile device are transmitted to WhatsApp to assist in the identification of the WhatsApp user. Rather than deleting the number s of the non-users, WhatsApp retains them in hash form. Only iOS6 users have the option of manually uploading their contact number
- Messages sent using WhatsApp were unencrypted leaving them prone to eavesdropping or interception. In Sept. 11, WhatsApp responded to this finding by introducing encryption
- WhatsApp was generating passwords for message exchanges using device information that can be easily exposed. There was a risk that a third party may send and receive messages in the name of users without their knowledge. WhatsApp has ssince introduced a more secure randomly generated key
The OPC and DDPA will continue to monitor WhatsApp to determine of breaches of the law continues and will decide after that whether they should take “further enforcement actions.”
Dutch laws allow the DDPA to impose sanctions on violators but the OPC doe no have order making powers.