{"id":19284,"date":"2025-08-15T01:00:00","date_gmt":"2025-08-15T00:00:00","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=19284"},"modified":"2025-09-14T06:59:21","modified_gmt":"2025-09-14T05:59:21","slug":"work-whatsapp-groups-gdpr","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/","title":{"rendered":"Work Whatsapp Groups and GDPR"},"content":{"rendered":"\r\n<p class=\"wp-block-paragraph\">Now that it&#8217;s summer, the kids&#8217; school groups are quieter (practically silent), but what about company WhatsApp messages and work WhatsApp groups? What about GDPR compliance?<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\" id=\"h-is-the-phone-number-personal-data\"><strong>Is the phone number personal data?<\/strong><\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Indeed, our mobile phone number is considered &#8220;personal data&#8221; as defined in Article 4.1 of the General Data Protection Regulation (GDPR).<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Therefore, the GDPR data protection rules also apply to WhatsApp (in all its versions: WhatsApp Messenger and WhatsApp Business), as well as to other communication channels such as email and SMS.<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\" id=\"h-can-a-company-use-whatsapp\"><strong>Can a company use WhatsApp?<\/strong><\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">WhatsApp is the mobile messaging app with the largest number of users (2 billion), and for this reason, many companies use it to communicate with both their customers and their own employees.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">A company can use WhatsApp for internal and even commercial communications, as long as it complies with the General Data Protection Regulation (GDPR).<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Therefore, it is essential that companies inform data subjects about the processing of their data and ensure that WhatsApp will not use this information for unauthorized purposes.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Therefore, for communications with its employees, the company can use WhatsApp Messenger (the one we use for our personal communications). For communications with clients, it must use WhatsApp Business.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>WhatsApp Business and Data Protection<\/strong><\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/business.whatsapp.com\/?lang=en_LA\" target=\"_blank\" rel=\"noreferrer noopener\">WhatsApp Business<\/a><strong> <\/strong>It is a version of the app designed specifically for communication between companies and customers, but it collects the same personal data as the Messenger version: name, phone number, profile photo, and location.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Compared to the standard version, WhatsApp Business offers additional features:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>Response automation.<\/li>\r\n\r\n\r\n\r\n<li>Creation of product catalogs.<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">In terms of data protection, the company that uses WhatsApp Business is the Data Controller (Article 4.7 of the GDPR) and must therefore ensure that the personal data communicated through the application complies with the regulations and must:<\/p>\r\n\r\n\r\n\r\n<ul class=\"wp-block-list\">\r\n<li>Inform users about how their data will be processed.<\/li>\r\n\r\n\r\n\r\n<li>Obtain explicit consent to send them marketing messages.<\/li>\r\n\r\n\r\n\r\n<li>Ensure that any data processing is transparent and limited to the purposes for which consent was obtained.<\/li>\r\n\r\n\r\n\r\n<li>Ensure that WhatsApp complies with its role as Data Processor (Article 28.1 of the GDPR).<\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\" id=\"h-without-consent-there-is-no-whatsapp-group\"><strong>Without consent, there is no WhatsApp group<\/strong><\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The Spanish Data Protection Agency (AEPD) has classified including a person in a WhatsApp group without their consent as a serious offense (from \u20ac40,001 to \u20ac300,000).<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">This decision, which does not affect the domestic and family sphere, seeks to protect the privacy of personal data and the purpose for which it is transferred.&nbsp; &nbsp;<\/p>\r\n\r\n\r\n\r\n<h3 class=\"wp-block-heading\" id=\"h-exception-contacting-employees-in-case-of-emergency\"><strong>Exception: Contacting employees in case of emergency<\/strong><\/h3>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Supreme Court Ruling 257\/2024 establishes that it is lawful for companies to request personal data (mobile phone number and personal email address) from their teleworking employees in order to contact them in the event of &#8220;service emergencies.&#8221;<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The judges did not exempt the company from using corporate media to communicate with employees, despite requesting their personal cell phone and email addresses.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">However, the ruling notes that, in emergencies, corporate resources may not be available, and the company must be able to contact its employees.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The Supreme Court considers that it is not disproportionate for companies to request this data from their employees, provided they do not abuse its use and do not violate the right to digital disconnection.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>What is the right to digital disconnection?<\/strong><\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">As we explained in a <a href=\"https:\/\/www.rosello-mallol.com\/en\/digital-disconnection\/\" target=\"_blank\" rel=\"noreferrer noopener\">previous post<\/a> the right to digital disconnection is a right that all employees have to not connect to any digital device, of a professional nature, during their breaks or outside of working hours (this includes vacations and leave).<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Therefore, this right legitimizes workers not to respond to emails, calls, WhatsApp messages, video calls, or any type of digital communication outside of their working hours.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">This right applies to all employees, regardless of their work type (in-person or remote), contract type, or any other specific employment condition.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Supreme Court Resolution 257\/2014 does not repeal the right to digital disconnection, but it reminds us that this is not an absolute right.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">In urgent situations, if the use of a personal cell phone has been agreed upon and the action is taken within working hours and proportionately, timely contact is legally protected.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Author: <strong>Sandra Santiago<\/strong>, Lawyer.<\/p>\r\n\r\n","protected":false},"excerpt":{"rendered":"<p>Now that it&#8217;s summer, the kids&#8217; school groups are quieter (practically silent), but what about company WhatsApp messages and work WhatsApp groups? What about GDPR compliance? Is the phone number personal data? Indeed, our mobile phone number is considered &#8220;personal data&#8221; as defined in Article 4.1 of the General Data Protection Regulation (GDPR). Therefore, the [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":19276,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_joinchat":[],"footnotes":""},"categories":[246],"tags":[1392,395,396],"class_list":["post-19284","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-digital-rights","tag-gdpr-2","tag-gdpr-compliant"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Work Whatsapp Groups and GDPR | Rosell\u00f3 Mallol<\/title>\n<meta name=\"description\" content=\"Is it legal under GDPR for the company to join a work whatsapp group without your permission? Solve your doubts...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Work Whatsapp Groups and GDPR\" \/>\n<meta property=\"og:description\" content=\"Now that it&#039;s summer, the kids&#039; school groups are quieter (practically silent), but what about company WhatsApp messages and work WhatsApp groups? What\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"Rosell\u00f3 Mallol\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-15T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-14T05:59:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"835\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"V\u00edctor Rosello Mallol\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:site\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"V\u00edctor Rosello Mallol\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Work Whatsapp Groups and GDPR | Rosell\u00f3 Mallol","description":"Is it legal under GDPR for the company to join a work whatsapp group without your permission? Solve your doubts...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/","og_locale":"en_US","og_type":"article","og_title":"Work Whatsapp Groups and GDPR","og_description":"Now that it's summer, the kids' school groups are quieter (practically silent), but what about company WhatsApp messages and work WhatsApp groups? What","og_url":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/","og_site_name":"Rosell\u00f3 Mallol","article_published_time":"2025-08-15T00:00:00+00:00","article_modified_time":"2025-09-14T05:59:21+00:00","og_image":[{"width":1280,"height":835,"url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg","type":"image\/jpeg"}],"author":"V\u00edctor Rosello Mallol","twitter_card":"summary_large_image","twitter_creator":"@vic_rosello","twitter_site":"@vic_rosello","twitter_misc":{"Written by":"V\u00edctor Rosello Mallol","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#article","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/"},"author":{"name":"V\u00edctor Rosello Mallol","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/7fa3cf4f56820cf83675a0e692ca85d6"},"headline":"Work Whatsapp Groups and GDPR","datePublished":"2025-08-15T00:00:00+00:00","dateModified":"2025-09-14T05:59:21+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/"},"wordCount":683,"publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg","keywords":["digital rights","gdpr","gdpr compliant"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/","url":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/","name":"Work Whatsapp Groups and GDPR | Rosell\u00f3 Mallol","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#primaryimage"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg","datePublished":"2025-08-15T00:00:00+00:00","dateModified":"2025-09-14T05:59:21+00:00","description":"Is it legal under GDPR for the company to join a work whatsapp group without your permission? Solve your doubts...","breadcrumb":{"@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#primaryimage","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg","width":1280,"height":835,"caption":"Whatsapp"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosello-mallol.com\/en\/work-whatsapp-groups-gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inici","item":"https:\/\/www.rosello-mallol.com\/en\/"},{"@type":"ListItem","position":2,"name":"Work Whatsapp Groups and GDPR"}]},{"@type":"WebSite","@id":"https:\/\/www.rosello-mallol.com\/en\/#website","url":"https:\/\/www.rosello-mallol.com\/en\/","name":"Rosell\u00f3 Mallol","description":"Despatx advocats experts en TIC i Protecci\u00f3 de dades","publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosello-mallol.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosello-mallol.com\/en\/#organization","name":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital","url":"https:\/\/www.rosello-mallol.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","width":4000,"height":736,"caption":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/vic_rosello","https:\/\/www.instagram.com\/rosellomallol\/","https:\/\/www.linkedin.com\/in\/victorrosello\/","https:\/\/www.youtube.com\/channel\/UCxcqAdksWzsEaZ5UYoFJd0Q\/featured"]},{"@type":"Person","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/7fa3cf4f56820cf83675a0e692ca85d6","name":"V\u00edctor Rosello Mallol","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f6654958ef1f1268656bc9e22a33eb75f1d1b2f74baf6b4715e291bdad9c5a5e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f6654958ef1f1268656bc9e22a33eb75f1d1b2f74baf6b4715e291bdad9c5a5e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f6654958ef1f1268656bc9e22a33eb75f1d1b2f74baf6b4715e291bdad9c5a5e?s=96&d=mm&r=g","caption":"V\u00edctor Rosello Mallol"},"url":"https:\/\/www.rosello-mallol.com\/en\/author\/victor-rosello\/"}]}},"jetpack_featured_media_url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/whatsapp-2105015_1280.jpg","_links":{"self":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/19284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/comments?post=19284"}],"version-history":[{"count":1,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/19284\/revisions"}],"predecessor-version":[{"id":19285,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/19284\/revisions\/19285"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media\/19276"}],"wp:attachment":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media?parent=19284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/categories?post=19284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/tags?post=19284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}