WhatsApp Tests Age Verification Prompt Ahead Of DPDP Act Rollout

Proactive Compliance with India's DPDP Act

WhatsApp, a Meta-owned messaging platform, is taking proactive steps to comply with India's Digital Personal Data Protection (DPDP) Act, which is slated to come into force in May 2027. The company is testing privacy-protective age verification methods, including an optional prompt for select users to provide their date of birth. This initiative is a direct response to the upcoming legislation, which mandates platforms to obtain verifiable parental or guardian consent before processing the personal data of children.

It is crucial to note that the DPDP Act does not explicitly require users to verify their age or for minors to disclose it. Instead, the law places the onus on platforms to exercise due diligence in establishing the age of users and the authority of those providing consent. WhatsApp has clarified that the information provided remains optional and will be processed in line with its privacy commitments, ensuring it is not visible to other users. This approach suggests a strategy to gather necessary data while maintaining user control and privacy.

Broader Regulatory Scrutiny on Meta in India

WhatsApp's age verification tests occur amidst a period of heightened regulatory scrutiny for its parent company, Meta, in India. The tech giant has faced several challenges, particularly concerning content moderation. Recently, Meta India's vice president and head, Arun Srinivas, was named in an FIR in Hyderabad over allegedly objectionable content circulated on the company's platforms, including morphed content targeting Prime Minister Narendra Modi.

This incident followed another controversy where Facebook temporarily removed a video posted by PM Modi, later attributing the takedown to an error in its AI-powered content moderation system. Meta has since informed the IT ministry that such posts will undergo additional oversight, requiring approval from at least two senior executives before any moderation decision. Furthermore, the IT ministry earlier this month asked WhatsApp to pause the rollout of its username feature in India due to concerns about potential impersonation, phishing, and online fraud if usernames resembled those of individuals, financial institutions, or government agencies.

Implications for Digital Platforms and User Data

The ongoing developments with WhatsApp's age verification and Meta's broader regulatory challenges signal a significant shift in the operating environment for digital platforms in India. The DPDP Act is poised to reshape how user data, especially that of minors, is collected, processed, and protected. Platforms will need to invest in robust mechanisms for age verification and consent management, potentially leading to more stringent onboarding processes and data handling policies.

Meta's experiences highlight the complexities of navigating India's evolving digital regulations, balancing compliance with user experience and platform integrity. The government's active engagement, from questioning content moderation decisions to pausing new feature rollouts, indicates a firm stance on digital governance. This trend suggests that other digital service providers in India will also need to meticulously review and adapt their practices to align with the new legal framework, ensuring greater accountability and user protection in the digital realm.