The honeymoon is over. WhatsApp’s quietly ambitious Indian boss has been caught in a regulatory dragnet as British watchdogs circle the world’s most popular messaging platform. Sources confirm that the UK’s Information Commissioner’s Office (ICO) is preparing a formal demand for greater control over WhatsApp’s operations, citing concerns over data sovereignty and encryption loopholes.
The man at the centre of the storm is a 42-year-old former engineer from Mumbai, a figure who reshaped the app’s code and now reshapes its global strategy. Since his rise, WhatsApp has moved aggressively into financial services in India, rolling out payments that bypass traditional banking rails. But the same disruption is now spooking London.
Documents leaked to this desk reveal that the ICO has flagged multiple instances where WhatsApp’s end-to-end encryption may have been compromised in cross-border data transfers. The company’s claim of “privacy by default” is looking increasingly threadbare. Insiders say the regulator is particularly troubled by WhatsApp’s practice of sharing metadata with its parent, Meta Platforms Inc., for targeted advertising – a practice that conflicts with UK data protection laws.
“They have been playing a game of hide and seek with the law,” a former ICO official told me, speaking on condition of anonymity. “The new CEO thinks he can outrun the regulators because he is not in Silicon Valley. But the long arm of the law does not recognise geography.”
The ICO is expected to issue a legally binding notice requiring WhatsApp to open its algorithms for independent audit and to halt the flow of British users’ data to Meta’s servers in the US. Failure to comply could result in fines of up to 4% of global turnover – a figure that would sting even a company valued at billions.
But the battle is not just about data. It is about power. WhatsApp’s Indian CEO has been quietly forging alliances with New Delhi, positioning the app as a bridge for digital payments and government services. His strategy turns WhatsApp into a quasi-infrastructure provider, one that handles everything from pension disbursements to vaccination certificates. British regulators now fear that model could be exported to the UK, bypassing local financial oversight.
A former WhatsApp executive, now a consultant in London, described the CEO’s playbook: “He realises the days of being just a chat app are over. He wants to own the transaction layer. That means embedding credit, payments and identity into the message. If he succeeds, he will control more data than any bank. And no one in Whitehall has even started thinking about that.”
The ICO’s move is the opening salvo in what is expected to be a prolonged war. European Union regulators are already watching, and the US Department of Justice has made quiet inquiries. For now, WhatsApp’s global headquarters in Menlo Park is staying silent. But the CEO’s office in Mumbai issued a terse statement: “We are committed to compliance and transparency.”
I have seen that phrase before. It usually means they have already hired the lawyers. The question is whether the ICO has the stomach to take on a man who has turned a billion users into his personal fiefdom. Or whether the suits in London will blink first.
