Meta successfully avoids a dismissal of the WhatsApp privacy lawsuit as the judge doubts the specifics provided by the whistleblower.

      A federal judge has dismissed a class-action lawsuit asserting that Meta can read WhatsApp messages, despite its claims of end-to-end encryption, on the grounds that the complaint lacked sufficient detail regarding the whistleblower allegations. The lawsuit, initiated in January by plaintiffs from Australia, Brazil, India, Mexico, and South Africa, accused Meta and WhatsApp of deceiving over three billion users about the security of their private communications. US District Judge Rita Lin has allowed the plaintiffs the opportunity to amend and refile the case.

      The lawsuit relied on unnamed whistleblowers who informed federal investigators that Meta employees and third-party contractors might access WhatsApp messages via an internal system, contrary to the company's portrayal of end-to-end encryption as unbreakable. The plaintiffs contended that a worker could obtain access by submitting a request to engineers who would fulfill it without oversight, and that messages from the time of account creation could be accessed without decryption. Meta characterized the allegations as "categorically false" and reaffirmed that WhatsApp has employed the Signal protocol for encryption for nearly ten years.

      The judge noted there was insufficient information regarding the whistleblowers’ knowledge but did not rule out the possibility of the allegations being true, emphasizing that current evidence does not definitively negate the claims. She denied Meta’s request for sanctions against the plaintiffs and their legal team, indicating that the court does not consider the case to be frivolous. Adam Wolfson, the plaintiffs’ attorney from Quinn Emanuel, expressed eagerness to provide more detailed evidence regarding the whistleblower testimony, which he referred to as extensive.

      This dismissal occurred three months after the US Commerce Department unexpectedly ceased its investigation into the same whistleblower claims, shortly after the lead investigator shared preliminary findings with other federal agencies. The reasons for this closure remain unclear, and sources have not disclosed whether any evidence of wrongdoing was found or if the investigation was ended for procedural or political reasons. In May, Texas Attorney General Ken Paxton filed a separate lawsuit against Meta and WhatsApp with similar allegations, meaning Meta is still facing legal challenges from various directions despite this recent federal court outcome.

      Meta has been significantly investing in WhatsApp’s privacy features, introducing an Incognito Chat mode for its AI assistant in May, which processes conversations within a secure enclave that even its engineers are said to be unable to access. However, the company has a history of data privacy issues, including a substantial EU privacy fine and a tendency to outsource sensitive data management to contractors, whose employees have reported viewing private user content without proper safeguards. The plaintiffs have until August to submit an amended complaint, and Wolfson’s firm is poised to do this.