The Data Protection Commission has recently handed down over €1bn in fines against Meta-owned companies for privacy breaches under GDPR. The latest against messaging service WhatsApp is a drop in the ocean by comparison at €5.5 million. Yet it too is now subject to legal challenge.