CCI has entrenched upon an aspect with nothing to do with competition
In a Mumbai appellate tribunal, Meta has challenged the legal foundations of a ₹213 crore penalty, asking a fundamental question that echoes across modern regulatory systems: where does competition law end and privacy law begin? The case turns not on disputed facts but on disputed jurisdiction — whether a competition watchdog may reach into the domain of data governance when the two realms increasingly share the same territory. How India's tribunal answers will quietly determine the shape of digital market regulation for years to come.
- Meta is not contesting what happened in 2021 — it is contesting whether the CCI had any right to rule on it at all, a jurisdictional challenge that could void the entire penalty.
- Senior advocate Kapil Sibal argued that the CCI crossed into privacy regulation, a domain with its own legal architecture, effectively accusing the watchdog of regulatory overreach dressed as competition enforcement.
- The absence of an effect-based analysis is Meta's sharpest weapon: no demonstrated harm to advertisers, no measurable damage to competitors, no proven distortion of the advertising market.
- WhatsApp's counsel complicated the CCI's coercion narrative by pointing out that the company had quietly walked back its all-or-nothing ultimatum in May 2021, softening the very conduct the regulator had treated as abusive.
- NCLAT now holds a decision that will either confirm data access as a legitimate competition concern or force Indian regulators to pursue such cases through privacy law channels instead.
Meta appeared before the National Company Law Appellate Tribunal on Thursday to contest a ₹213 crore penalty imposed by the Competition Commission of India last November. The company had been found guilty of abusing its dominant market position through a 2021 policy update that pooled user data across Facebook, Instagram, and WhatsApp. But Meta's challenge was less about the facts than about the legal ground beneath them.
Senior advocate Kapil Sibal argued that the CCI had wandered outside its jurisdiction, addressing questions of data privacy that belong to a different body of law entirely. Abusive market practice, he told the tribunal, has nothing to do with a platform's data privacy policy. If that distinction holds, the November order loses its foundation.
The deeper problem, Sibal contended, was analytical. The CCI had not conducted an effect-based inquiry, nor had it produced evidence that the 2021 policy actually harmed advertisers, competitors, or the advertising market. Allegations, he suggested, had been treated as proof.
On the question of WhatsApp's terms, counsel Arun Kathpalia offered a corrective to the CCI's portrayal of coercion. While users initially appeared to face a stark choice — accept new data-sharing terms or lose access — WhatsApp had clarified in May 2021 that accounts would not be deleted for non-acceptance, retreating from the hard line the regulator had condemned.
The tribunal must now decide whether data access constitutes a competitive weapon subject to competition law, or whether troubling data practices must be addressed through privacy frameworks. The ruling will set a significant precedent for how India regulates the intersection of market power and personal data in the technology sector.
Meta walked into the National Company Law Appellate Tribunal on Thursday with a straightforward argument: the competition regulator had no business doing what it did. The company was challenging a ₹213 crore penalty handed down by the Competition Commission of India last November, a decision that had found Meta guilty of abusing its dominant market position. But Meta's legal team wasn't disputing the facts of the case so much as the very ground on which the case had been decided.
Senior advocate Kapil Sibal, representing Meta, told the tribunal that the CCI had strayed far beyond its mandate. The competition watchdog, he argued, had ventured into questions of privacy and data sharing—territory that belongs to privacy law, not competition law. "CCI has entrenched upon an aspect of the matter that has nothing to do with competition," Sibal said. "Abusive practice has nothing to do with the data privacy policy of the platform." The distinction matters enormously. If Sibal is right, then the entire foundation of the CCI's November order collapses, and the penalty along with it.
The CCI's original case centered on Meta's 2021 policy update, which gave the company access to user data across its platforms—Facebook, Instagram, and WhatsApp. The regulator concluded that this move allowed Meta to deny market access to advertisers and to leverage its dominance in messaging to protect its position elsewhere. It was, in the CCI's view, a textbook case of abuse. But Sibal argued that the CCI had failed to do the analytical work required to prove this. There was no effect-based analysis, he said. More fundamentally, there was no evidence. "There is no analysis on the extent of alleged anti-competitive effects caused by the 2021 policy update, let alone evidence that those effects have actually materialised," Sibal told the tribunal. He pressed the point: the CCI's order contained no proof of actual harm to advertisers, no proof of harm to competitors, no proof of harm to the advertising market itself.
The question of WhatsApp's policy update also came up. When WhatsApp rolled out its 2021 terms, users faced what looked like a binary choice: accept the new data-sharing arrangement or lose access to the app. The CCI had treated this as coercive. But Arun Kathpalia, arguing for WhatsApp, offered a different reading. In May 2021, he said, WhatsApp had issued a clarification: users' accounts would not actually be deleted if they refused to accept the updated policy. The company had backed away from the hard line it initially appeared to take.
What unfolds now depends on how the tribunal weighs these arguments. Meta is essentially asking the court to draw a bright line between competition law and privacy law—to say that even if a company's data practices are troubling from a privacy standpoint, that doesn't automatically make them anti-competitive. The CCI, by contrast, had treated data access as a competitive weapon, something that could be wielded to distort markets. The tribunal's decision will shape how Indian regulators approach tech companies going forward, particularly as they grapple with the overlapping concerns of market competition and personal data protection.
Notable Quotes
CCI has entrenched upon an aspect of the matter that has nothing to do with competition. Abusive practice has nothing to do with the data privacy policy of the platform.— Kapil Sibal, senior advocate for Meta
There is no analysis on the extent of alleged anti-competitive effects caused by the 2021 policy update, let alone evidence that those effects have actually materialised.— Kapil Sibal, senior advocate for Meta
The Hearth Conversation Another angle on the story
Why does Meta think the CCI overstepped? Isn't data access a competitive issue?
Meta's argument is that the CCI conflated two separate legal domains. Privacy concerns and competition concerns aren't the same thing. You can have a privacy problem without having a competition problem.
But if Meta uses data access to lock out competitors, isn't that anti-competitive by definition?
That's the crux of the dispute. Meta says the CCI never proved that actually happened—that the 2021 policy caused real competitive harm. The CCI assumed it did. Without evidence of actual market damage, Meta argues, you're just regulating privacy under the guise of competition law.
What about the WhatsApp policy that seemed to force users to share data or lose the app?
WhatsApp says it never actually forced anyone. They clarified within months that accounts wouldn't be deleted for non-acceptance. So the coercive framing the CCI relied on may not hold up.
If Meta wins this appeal, what happens to data regulation in India?
It would mean the CCI can't use competition law as a backdoor to regulate privacy. Privacy issues would have to be handled by privacy regulators, not competition authorities. That's a significant boundary.
And if Meta loses?
Then the CCI's approach stands: data practices that entrench market power are fair game for competition enforcement, regardless of whether privacy law also applies.