<http://schema.org/articleBody>
"WhatsApp, the popular mobile messaging service, has been accused of violating international privacy laws over its handling of personal information.\r\n\r\nIn a collaborative investigation by Canadian and Dutch data privacy officials, it was determined that app users &amp;quot;do not have a choice to use the app without granting access to their entire address book.&amp;quot;\r\n\r\nWhile the focus by privacy officials was around WhatsApp's violations, the committee did note that the company had taken steps to implement many of its recommendations in order to comply with Canadian and Dutch privacy laws, of which was the basis of the charges. And while some of the privacy issues have been resolved, a statement revealed that there are other outstanding issues that have yet to be fully addressed.\r\n\r\nThe Office of the Privacy Commissioner of Canada cited examples that it believes shows WhatsApp's lax privacy enforcement:\r\n\r\n\r\n\tIn order to facilitate contact between application users, WhatsApp relies on a user\u2019s address book to populate subscribers\u2019 WhatsApp contacts list.\u00A0 Once users consent to the use of their address book, all phone numbers from the mobile device are transmitted to WhatsApp to assist in the identification of other WhatsApp users.\u00A0 Rather than deleting the mobile numbers of non-users, WhatsApp retains those numbers (in a hash form).\r\n\tAt the time the investigation began, messages sent using WhatsApp\u2019s messenger service were unencrypted, leaving them prone to eavesdropping or interception, especially when sent through unprotected Wi-Fi networks.\r\n\tOver the course of the investigation, it was found that WhatsApp was generating passwords for message exchanges using device information that can be relatively easily exposed.\u00A0 This created the risk that a third party may send and receive messages in the name of users without their knowledge.\r\n\r\n\r\nThe investigation has already resulted in some reforms. WhatsApp has introduced encryption in its platform that it says will prevent anybody from intercepting or eavesdropping. What's more, the company says it has strengthened its authentication process in its latest version -- it uses a &amp;quot;more secure randomly generated key instead of generating passwords from Media Access Control (MAC) or International Mobile Station Equipment Identity (IMEI) numbers.&amp;quot;\r\n\r\nAlthough both countries have conducted a joint investigation, they have issued separate reports, respecting each of their data protection laws. However, both say that they will be monitoring WhatsApp's progress to ensure that it is fulfilling its commitment towards user privacy.\r\n\r\nWe've reached out to WhatsApp for comment and will update this if we hear back.\r\n\r\nThis investigation comes at a time when WhatsApp has achieved enormous popularity. Earlier this month, it announced that it has processed 18 billion total messages in a single day, exceeding an August 2012 record of 10 billion messages -- this surpasses Apple's iMessage service, which generated more than 1 billion a day.\r\n\r\nAdditionally, WhatsApp has partnered with Hong Kong operator Three as its first carrier roaming deal giving customers unlimited access to the app in Hong Kong and 78 other countries.\r\n\r\nPhoto credit:\u00A0MEHDI FEDOUACH/AFP/Getty Images"^^<http://www.w3.org/2001/XMLSchema#string>
<http://thenextweb.com/insider/2013/01/28/canada-and-dutch-authorities-claim-whatsapp-violates-international-privacy-laws-reforms-being-made/>