EDPB decided that WhatsApp IE inappropriately relied on contract as a legal basis to process personal data. As a consequence, the EDPB instructed the IE DPA to add an infringement of Art. 6(1) GDPR. Additionally, the EDPB instructed the IE DPA to include an infringement of the principle of fairness under Art. 5(1)(a) GDPR. Further info here: https://edpb.europa.eu/news/news/2023/edpb-publishes-binding-decision-concerning-whatsapp_it