Why schools shouldn’t use Whatsapp

There are a number of serious concerns about using Whatsapp for school communications. First, Whatsapp says it should not be used for business; it is against their terms and conditions. Second, I'm not a data protection expert, but I believe it is not compliant with GDPR for a school. Third, there is no way that a school can access the content should it need to; there is no audit trail whatsoever. (Some schools have asked about use with students, the age limit set by WhatsApp's terms and conditions is 16.)

Whatsapp is owned by Facebook and data can be shared between them. Although Whatsapp have a business app, this is for businesses to link with their customers (ie the public), not designed for private chat within an organisation.

Whatsapp say ‘You must access and use our Services only for legal, authorized, and acceptable purposes. You will not use (or assist others in using) our Services in ways that…(f) involve any non-personal use of our Services unless otherwise authorized by us.' In other words, no business use (see Terms and Conditions)

Before using any product that processes personal data, data controllers should analyse terms and conditions, make a formal risk assessment and achieve sign off at an appropriate level, agreeing the use of the product. You may also wish to discuss this with your legal provider.

This article explains some of the issues: https://www.9ine.uk.com/newsblog/whatsapp_communicating_in_schools
Another one is here: https://www.beekeeper.io/blog/why-you-shouldnt-use-whatsapp-for-business-communication/

I've been reminded about schools using Whatsapp during this current crisis, so this question has come up a few times. A product that does provide secure group messaging is ‘Guild' which businesses use for its compliance to GDPR and has high-level security to keep information within the corporate company. Each business account has a administrator that manages the product. At any time authorised senior users with appropriate admin access can export data submitted to the customer’s messaging groups for the purposes of an audit trail. A business account of Guild costs £950/yr for up to 150 members. (Whatsapp is free – because you and your data are its actually product.)

Guild can be found here: https://guild.co/
Guild: use for remote working: https://guild.co/blog/how-to-use-guild-for-remote-working/

Join the Safeguarding Briefing Today!
The FREE Weekly Safeguarding Briefing keeps you up-to-date with information and practical resources.