Meta’s New Opt-In Policy and GDPR Compliance

Prev Next

Meta, the company behind WhatsApp, has recently updated its WhatsApp Business Messaging Policy regarding opt-ins. As per the November 2024 update by Meta, businesses must obtain opt-in permission before messaging people on WhatsApp. This permission can be general or not specifically for WhatsApp, as long as businesses comply with all local laws.

This means a general SMS opt-in might be sufficient to send marketing messages via WhatsApp. However, this raises an important question: how does this align with GDPR regulations?

GDPR and WhatsApp Business

The General Data Protection Regulation (GDPR) mandates that consent must be specific to each processing activity, including receiving messages on WhatsApp. Although Meta’s new policy seems to loosen the opt-in requirements, businesses subject to GDPR must still ensure compliance.

To stay compliant, businesses should follow these GDPR principles:

  • Explicit consent: Users must give clear and informed permission before receiving messages. Generic opt-ins might not be sufficient.

  • Data minimization: Only collect and process essential data for communication.

  • Right to erasure: Users should be able to request that their data be deleted, and businesses are required to apply.

  • Transparency and accountability: Businesses should be clear about how they use customer data and keep records of opt-ins for legal purposes.

Why did Meta change this policy?

Meta’s adjustment to the opt-in policy likely reflects a strategic move to:

  • Stay competitive: Google’s Rich Communication Services (RCS) allows SMS opt-ins, and Meta wants to align WhatsApp with similar ease of use.

  • Encourage business adoption: Simplifying the opt-in process could drive more businesses to use WhatsApp for marketing.

  • Prevent spam: While making opt-ins easier, Meta still aims to prevent WhatsApp from becoming a spam-heavy platform.

GDPR Compliance Best Practices for WhatsApp Business

To ensure compliance while using WhatsApp Business for marketing, businesses should:

  • Obtain explicit opt-ins: Make sure users clearly agree to receive WhatsApp messages. Avoid assuming general consent applies.

  • Provide clear opt-out options: Allow users to unsubscribe easily from messages anytime.

  • Secure customer data: Protect all collected data with strong security measures to prevent breaches.

  • Maintain consent records: Keep detailed logs of when and how users provided consent in case of audits or legal inquiries.

New Opt-Out Mechanisms Introduced by Meta

In addition to changes in opt-in policies, Meta has also introduced new opt-out methods to give WhatsApp users more control over the marketing messages they receive.

Interested/Not Interested feedback

WhatsApp users can use the Offers and Announcements setting to indicate how interested they are in receiving marketing template messages from your business. If a user chooses Not interested, it can affect per-user marketing template messaging limits between you and the user.

Stop/Resume controls

WhatsApp users can use the Offers and Announcements setting to stop or resume delivery of marketing template messages from your business.

Since this will stop sending Meta messages to these users, users who have clicked the Stop Offer button will be marked as opt-out and will not be included in the audience for the next campaign segmentation.

Additionally, to identify the users included in your campaign's Unsubscribe Rate who clicked the "Stop offer" button, you can export their information from the InOne panel.

To export these users,

  1. Go to Audience > Contacts Management > All Contacts. Click Filter Contacts and select Events in the Standard segment.

  2. Apply the filter below.

If you want to evaluate these users for an opt-in chance, you can segment them with a different marketing channel as follows.