In a shakeup that reverberates from Bangalore to Brussels, an Indian entrepreneur has assumed the helm of WhatsApp, the world’s most ubiquitous messaging platform. The appointment, confirmed earlier today, marks a pivotal moment for digital sovereignty and the tangled web of cross-border data governance. For UK regulators, it is a clarion call for heightened scrutiny.
New Delhi-born Rohan Mehta, formerly chief product officer at a fintech unicorn, steps into the role amid growing tensions over encryption, content moderation, and the geopolitical chasm between Western privacy norms and India’s increasingly assertive digital public infrastructure. Mehta inherits a platform with over two billion users, a messaging backbone for everything from family chats to government advisories. But his ascent raises urgent questions: will WhatsApp’s end-to-end encryption bend under pressure from Indian state interests? And how will UK users’ data fare under a leadership that answers to a different legal framework?
The timing is critical. Britain’s Online Safety Bill, now in its final legislative stages, demands that platforms like WhatsApp scan for illegal content without breaking encryption. Meta, WhatsApp’s parent company, has threatened to pull the service from the UK rather than compromise security. Mehta’s background in India’s data localisation ecosystem adds fuel to these fears. India’s proposed Digital Data Protection Bill requires platforms to store certain user data within the country, a move that privacy advocates warn could create a blueprint for surveillance.
Speaking at his first press conference, Mehta struck a conciliatory tone. “WhatsApp’s commitment to privacy is absolute,” he said, his voice steady over a crackling video link from Mumbai. “I understand the anxieties. My priority is to build trust through transparency, not by dismantling the protections users rely on.” Yet his history suggests a pragmatic approach: at his previous venture, he oversaw the integration of India’s Aadhaar authentication system into payment services, a controversial move that put convenience over anonymity.
UK technology secretary Margaret Hargreaves issued a statement calling for “vigilance rather than alarm.” She reminded the public that WhatsApp’s UK operations remain subject to British law, including the upcoming Online Safety Bill. “Data flows across borders but rights do not,” she said. “We will ensure that no leadership change undermines the protections we have fought for.” Her words were measured but pointed, hinting at potential sanctions if Meta fails to comply.
The broader implications are profound. WhatsApp is more than an app: it is a de facto public utility, especially in the Global South where it delivers healthcare updates and election information. Mehta’s appointment could accelerate WhatsApp’s transformation into a transactional hub, embedding payments, shopping, and government services into the chat interface. That vision aligns with India’s India Stack, a digital infrastructure that critics describe as a surveillance capitalism dream. For UK users, this might mean new features but also deeper data ties to a jurisdiction with weaker privacy protections.
Privacy campaigners are mobilising. “We cannot have a situation where the CEO of one of the world’s largest communication tools is accountable to a regime with a troubling human rights record,” said Eleanor Frost of the Open Rights Group. “The UK must demand binding commitments now, before the new strategy unfolds.”
Financially, the move is a coup for India’s tech ambition. It signals a shift in Silicon Valley’s power centre, with Indian executives increasingly dominating the C-suites of global platforms. Yet it also exposes the fragility of a system where one person’s decisions can affect billions. Mehta inherits a platform grappling with misinformation in India, where WhatsApp groups have been used to incite violence. The same problem afflicts UK communities, from anti-vaccine conspiracy theories to far-right organising.
For the common user, today’s news may feel distant. But the ripple effects are immediate. Every message sent, every photo shared, every location pinned now passes through a chain of command that ends in New Delhi. The encryption keys remain the same, but the human judgement behind policy changes. As the sun sets on the old WhatsApp, the question hangs in the air: who watches the watchman?
UK regulators are watching closely. In the coming weeks, Meta will likely face renewed calls for transparency around data handling and algorithmic content decisions. The Information Commissioner’s Office has already signalled interest in a formal review of WhatsApp’s data protection practices under the new leadership. Meanwhile, the Competition and Markets Authority may probe whether Mehta’s prior ties to India’s digital monopoly create anticompetitive advantages.
For now, users can do little but wait and update their apps. The interface glows the same green. The double blue ticks still appear. But beneath the surface, a new era of digital diplomacy has begun, one where a single entrepreneur in Bangalore holds the keys to our most private conversations. The UK, and the world, must decide what that means.
