WhatsApp help pages hid chatbot instructions not to name privacy regulators
Hidden text in WhatsApp's help pages told its support chatbot not to recommend a data protection authority to users who could no longer delete their accounts, even though the company's European privacy policy says they can complain to one.
WhatsApp's help pages carried hidden instructions for its support chatbot that told it not to recommend a data protection authority or regulator to users who could no longer delete their accounts, according to The Hacker News. The report notes that WhatsApp's own privacy policy for Europe tells users they can complain to a regulator.
The text sat in the pages' code and was never shown on screen, the report says. It was removed by October 18, 2026. The source does not say who placed the instructions there, how long they were present, or whether the chatbot actually followed them in conversations with users.
Why it matters
Support chatbots increasingly sit between users and their rights. If a bot is steered away from naming a regulator, a user who has lost access to their account may never learn where to escalate. That gap matters most for people who cannot delete their accounts and want to know their options.
The report leaves open whether the instructions changed any real answer. That question is the one worth asking, and the source does not answer it.
For defenders and privacy teams
- Review the prompts and hidden text behind customer-facing chatbots, not just the visible help articles.
- Check that bot answers about complaints and data rights match the published privacy policy.
- Keep a record of prompt changes so you can explain later what a bot was told to do.
- Test the bot with questions about account deletion and escalation paths.
The source does not describe any regulatory action or response from WhatsApp beyond the removal.
Sources
If something here is wrong, tell us. Every correction is listed on the corrections page.
Don’t Just Read About Cyberattacks. Learn How They Work.
Go beyond the headlines. Explore hands-on cybersecurity labs, understand real-world vulnerabilities, and build practical security skills with HackZoneLabs.
Start Learning
