gdpr data-protection
Do I violate GDRP if install WhatsApp as a private user?
<p>As far as I can understand, if I install WhatsApp, the app sends my contact list to the server.</p>

<p>Isn't it by GDPR terms illegal to allow this data processing step if I have not asked all of my contacts (some of which might not use WhatsApp already) whether they agree or not, and ideally get their signature for that?</p>

<p>I've found so far this <a href="https://guild.co/blog/is-whatsapp-in-breach-of-the-gdpr-a-lawyers-view/" rel="nofollow noreferrer">assessment</a> but I fail to understand the text regarding the implications and ramifications of private, not business use.</p>

<p>The GDPR requires that Data Controllers can't share data with third parties unless they have a valid purpose and a legal basis for the sharing. The legal basis might be consent by the affected data subject, but other alternatives exist.</p>

<p>However, the GDPR exempts purely personal or household use from its requirements. You are not required to obtain consent from your friends and family when sharing your contacts with WhatsApp.</p>

<p>This exemption stops when you enter the public sphere. For example, if you store contracts for the members of a club that you organise on your phone, or if you store contacts of customers, then you'd have to fulfill your obligations as a Data Controller.</p>
