The lawsuit escalates a growing struggle between Prime Minister Narendra Modi’s government and tech giants including Facebook, Google parent Alphabet and Twitter in one of their key global growth markets.
WhatsApp has filed a legal complaint in Delhi against the Indian government seeking to block regulations coming into force on Wednesday that experts say would compel the California-based Facebook unit to break privacy protections.
The lawsuit, described to Reuters by people familiar with it, asks the Delhi high court to declare that one of the new rules is a violation of privacy rights in India’s constitution since it requires social media companies to identify the “first originator of information” when authorities demand it.
While the law requires WhatsApp to unmask only people credibly accused of wrongdoing, the company says it cannot do that alone in practice. Because messages are end-to-end encrypted, to comply with the law WhatsApp says it would have break encryption for receivers, as well as “originators”, of messages.
“Requiring messaging apps to “trace” chats is the equivalent of asking us to keep a fingerprint of every single message sent on WhatsApp, which would break end-to-end encryption and fundamentally undermines people’s right to privacy,” a WhatsApp spokesperson said in a statement. “We have consistently joined civil society and experts around the world in opposing requirements that would violate the privacy of our users. In the meantime, we will also continue to engage with the Government of India on practical solutions aimed at keeping people safe, including responding to valid legal requests for the information available to us.”
Sources familiar with the matter said that given that non-compliance of the IT rules risks criminal penalties, the company felt it had no choice but to take the matter to court. The company has opposed laws or legal action that would break end-to-end encryption in the past too, sources said, referring to a matter currently being heard by the Brazilian Supreme Court.
There is no true was to find the originator of a messages, sources continued, as people may copy-paste words they see elsewhere into a WhatsApp chat. The context of sharing these messages will be lost.
The lawsuit escalates a growing struggle between Indian Prime Minister Narendra Modi’s government and tech giants including Facebook, Google parent Alphabet and Twitter in one of their key global growth markets.
Tensions grew after a police visit to Twitter’s offices earlier this week. The micro-blogging service had labelled posts by a spokesman for the dominant party and others as containing “manipulated media”, saying forged content was included.
The government has also pressed the tech companies to remove not only what it has described as misinformation on the COVID-19 pandemic ravaging India, but also some criticism of the government’s response to the crisis, which is claiming thousands of lives daily.
The response of the companies to the new rules has been a subject of intense speculation since they were unveiled in February, 90 days before they were slated to go into effect.
The Intermediary Guidelines and Digital Media Ethics Code, promulgated by the ministry of information technology, designates “significant social media intermediaries” as standing to lose protection from lawsuits and criminal prosecution if they fail to adhere to the code.
WhatsApp, its parent Facebook and tech rivals have all invested heavily in India. But company officials worry privately that increasingly heavy-handed regulation by the Modi government could jeopardise those prospects.
Among the new rules are requirements that big social media firms appoint Indian citizens to key compliance roles, remove content within 36 hours of a legal order, and set up a mechanism to respond to complaints. They must also use automated processes to take down pornography.
Facebook has said that it agrees with most of the provisions but is still looking to negotiate some aspects. Twitter, which has come under the most fire for failing to take down posts by government critics, declined to comment.
Some in the industry are hoping for a delay in the introduction of the new rules while such objections are heard.
The WhatsApp complaint cites a 2017 Indian Supreme Court ruling supporting privacy in a case known as Puttaswamy, the people familiar with it said.
The court found then that privacy must be preserved except in cases where legality, necessity and proportionality all weighed against it. WhatsApp argues that the law fails all three of those tests, starting with the lack of explicit parliamentary backing.
Experts have backed WhatsApp’s arguments.
“The new traceability and filtering requirements may put an end to end-to-end encryption in India,” Stanford Internet Observatory scholar Riana Pfefferkorn wrote in March.
Other court challenges to the new rules are already pending in Delhi and elsewhere, including one filed by The Wire. These challenges, though, refer to the section that extends the IT rules to digital media publications.
In one, journalists argue that the extension of technology regulations to digital publishers, including the imposition of decency and taste standards, is unsupported by the underlying law.
