Data Privacy at the Altar of Competition Laws


Rupal Nayal


Data privacy has been receiving widespread attention. However, in some areas, dedicated laws are proving inadequate to deal with the impact of anti-competitive effects on the privacy of users. This requires a detailed discussion on the unilateral privacy policies imposed by data giants involving consent notices in the nature of “take it or leave it”. It further brings into question the role that competition law can play in examining abuse of dominance within firms, where users are being held captive and forced to share access to their data, given the status of the players in the market.


How to Cite
Nayal, R. (2023). Data Privacy at the Altar of Competition Laws. Competition Commission of India Journal on Competition Law and Policy, 3, 79–95.


  1. Arthur, C. (2021) Tech giants may be huge, but nothing matches big data. The Guardian. aug/23/tech-giants-data
  2. Balto, D.A., & Lane, M. (2016). Monopolizing water in a tsunami: Finding sensible antitrust rules for big data.
  3. Blankertz, A. (2020). How competition impacts data privacy. https://www. privacy.pdf
  4. Buiten, M.C. (2019). Regulating data giants: Between competition law and data protection law. Springer International Publishing. https://doi. org/10.1007/978-3-030-11611-8_13
  5. Buiten, M.C. (2020). Exploitative abuses in digital markets: Between competition law and data protection law. Journal of Antitrust Enforcement, 9(2), 270–288.
  6. Bundeskartellamt. (2019). Administrative proceedings decision under Section 32(1) German Competition Act (GWB). http:// Entscheidungen/Missbrauchsaufsicht/2019/B6-22-16.pdf%3F__ blob%3DpublicationFile%26v%3D5
  7. Bundeskartellamt. (2019). Bundeskartellamt prohibits Facebook from combining user data from different sources. SharedDocs/Meldung/EN/Pressemitteilungen/2019/07_02_2019_ Facebook.html Bundeskartellamt v. Facebook Inc., Federal Court of Justice Decision KVR 69/19
  8. Bundeskartellamt. (2016). Bundeskartellamt initiates proceeding against Facebook on suspicion of having abused its market power by infringing data protection rules. Meldung/EN/Pressemitteilungen/2016/02_03_2016_Facebook.html
  9. Competition Act, 2002, Act No. 12 of 2003. S1361-3723(02)00226-9 Competition Commission of India Case No. 15 of 2020
  10. Competition Commission of India Suo Moto Case No. 01 of 2021 Complaint under Article 77(1) GDPR. files/2020-05/complaint-facebook.pdf
  11. EU General Data Protection Regulation (GDPR): Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
  12. European Commission. (2017). Mergers: Commission fines Facebook €110 million for providing misleading information about WhatsApp takeover. https://
  13. Ezrachi, A. & Robertson, V. H.S.E. (2019). Competition, market power and third-party tracking. World Competition: Law and Economics Review, 42, 5–19.
  14. Facebook/Bundeskartellamt. The decision of the higher regional court of Düsseldorf (Oberlandesgericht Düsseldorf) in interim proceedings (2019) Case VI-Kart 1/19 (V)
  15. Graef, I., Clifford, D. & Valcke, P. (2018). Fairness and enforcement: bridging competition, data protection, and consumer law. International Data Privacy Law. 8(3), 200–223. Gupta V.K. & WhatsApp Inc., Case No. 99 of 2016
  16. Hoffmann, J. & Johannsen, G. (2019) EU-merger control & big data on data-specific theories of harm and remedies. Max Planck Institute for Innovation and Competition Research Paper Series.
  17. Hogben, G. (Ed.). (2007). Security issues and recommendations for online social networks. Enisa Position Paper No. 1.
  18. IFF. (2021). Big opportunity! CCI accepts IFF’s expert information in its investigation of WhatsApp’s 2021 privacy policy. Internet Freedom.
  19. Kemp, K. (2020). Concealed data practices and competition law: Why privacy matters. European Competition Journal, 16(2–3), 628–672. https://
  20. Kerber, W. & Zolna, K. K. (2021). The German Facebook case: The law and economics of the relationship between competition and data protection law. facebook_case_competition_law_data_protection_law_01.pdf
  21. Kimmel, L. & Kestenbaum, J. (2014). What’s up with WhatsApp: A transatlantic view on privacy and merger enforcement in digital markets. Antitrust, 29(1).
  22. Lee J. (2020). The Google-DoubleClick merger: Lessons from the Federal Trade Commission’s limitations on protecting privacy. Communication Law and Policy.
  23. Mal, A. & Parikh, J. (2011). Facebook and the right to privacy: Walking a tight rope. Nujs Law Review, 4, 299.
  24. Mehmood, A. (2016). Protection of big data privacy. IEEE Access, 4, 1821– 1834.
  25. Moshell, R. (2005). And then there was one: The outlook for a self-regulatory United States amidst a global trend towards comprehensive data protection framework. Texas Tech Law Review, 37, 357. Nederlandsche Banden Industrie Michelin v Commission, Case 322/81, ECLI:EU:C:1983:313
  26. Nissenbaum, H. (2010). Privacy in Context: Technology, Policy, and the Integrity of Social Life. Stanford University Press. https://doi. org/10.1515/9780804772891.
  27. Niu, E. (2016) European regulators are mad at Facebook and WhatsApp over sharing data. Business Insider. https://www.businessinsider. com/Facebook-Whatsapp-European-Regulators-Data-Sharing-2016- 12?Ir=T
  28. OECD. (2020). Abuse of dominance in digital markets. www.Oecd.Org/Daf/ Competition/Abuse-Of-Dominance-In-Digital-Markets-2020.Pdf Personal Data Protection Bill (2019) Bill No. 373 of 2019
  29. Puttaswamy, K.S. & Anr. v. Union of India & Ors. (2017). 10 SCC 1 Statement of FTC concerning Google/DoubleClick FTC File No. 071-0170. https://www.Ftc.Gov/System/Files/Documents/Public_ Statements/418081/071220googledc-Commstmt.Pdf
  30. Stojanovic, M. (2020). Can competition law protect consumers in cases of a dominant company breach of data protection rules. European Competition Journal, 16, 531–569. 020.1824464
  31. Stucke, M. & Grunes, A. (2016). Big Data and Competition Policy. OUP. Valetti, T. (2019). Testimony of Tommaso Valetti, Ph.D. Professor of Economics Imperial College Business School, Imperial College London, before the House Judiciary Committee Subcommittee on Antitrust, Commercial, and Administrative Law on Online Platforms and Market Power Part 3: The Role of Data and Privacy in Competition Van den Bergh, R. & Weber, F. (2021). The German Facebook saga:
  32. Abuse of dominance or abuse of competition law? World Competition Law and Economics Review, 44(1), 29–52. WOCO2021003
  33. Wahyuningtyas, S. Y. (2017). Abuse of dominance in non-negotiable privacy policy in the digital market. European Business Organization Law Review, 18(4), 785–800.
  34. Wasastjerna, M.C. (2019). The implications of big data and privacy on competition analysis in merger control and the controversial competition- data protection interface. European Business Law Review, 30(3), 337–365.
  35. WhatsApp and Facebook to share users’ data outside Europe and UK. (2021). BBC. https://www.Bbc.Com/News/Technology-55573149, Retrieved 15 November 2021
  36. WhatsApp. (2016). New features for more privacy, more protection, more control., Retrieved 27th July 2022
  37. WhatsApp LLC v. Competition Commission of India & Anr, AIR 2021 (NOC 710) 281
  38. WhatsApp Privacy Policy. (n.d.) https://www.Whatsapp.Com/Legal/ Updates/Privacy-Policy/?Lang=En