Does WhatsApp see itself as a Data Controller, Data Processor or both? For each, can you provide detail in which instances these relate to?
Both - depending on the circumstances. Below, we've outlined details about WhatsApp's role in each of these designations.
- Data processor: Each Client is a data Controller of its customer contacts. When the Client provides its customer contacts to WhatsApp via the WhatsApp Business Solution, WhatsApp is a data Processor of those customer contacts, and processes those customer contacts for the purpose of delivering the client's WhatsApp messages to those customers.
Our Data Processing Terms align with GDPR requirements governing contracts between data controllers and data processors.