WhatsApp for dental teams: privacy and record-keeping risks

Using WhatsApp for dental staff communication is not automatically unlawful. Whether a particular use is appropriate depends on the information shared, the configuration, the practice's policies and its data-protection responsibilities. The question is not simply whether an app is encrypted: it is whether the practice can manage access, retain appropriate records and protect the information throughout its lifecycle.

Key takeaways

• WhatsApp isn't automatically unlawful for work, but personal group chats are hard to govern.
• Exports and blue ticks exist, but they aren't a central practice record or proof someone understood.
• Keep patient-identifiable information out of personal chats and decide where official instructions live.

“processed in a manner that ensures appropriate security of the personal data”

— UK GDPR Article 5(1)(f), via the ICO

Distinguish social chat from practice records

A group arranging a social event has different risks from a group sharing patient information, discussing staff health or communicating a safety-critical procedure. Identify what the practice actually uses each channel for before deciding whether to replace it.

Do not put patient details or sensitive personnel information into a personal group merely because it is convenient. Check your lawful basis, any additional conditions for special-category data, confidentiality obligations and the safeguards appropriate to the information. Where these decisions are uncertain, obtain advice from the person responsible for data protection.

Encryption is only one safeguard

End-to-end encryption does not resolve who can see an unlocked device, what appears in notifications, who receives a forwarded message or what happens to information stored outside the active conversation. Device settings, backups and the way people use the channel also matter.

With personal phones, the practice needs a clear bring-your-own-device approach rather than assuming it controls every copy. Agree screen-lock and access expectations, how incidents are reported and what happens when a phone is lost or a colleague leaves. Explain those expectations to staff rather than relying on an unwritten convention.

Chat exports are not a complete records policy

WhatsApp offers chat export functionality. It is therefore inaccurate to say that it cannot export conversations at all. However, an export available to a user is not the same as a centrally managed, complete and governed practice record. Decide which communications need retention, who is authorised to collect them and how they can be retrieved securely.

Check continuity when a group administrator or staff member leaves. Remove inappropriate access, consider retained copies and make sure any important record is available to the authorised practice team. Do not assume that changing membership automatically recalls all previously received information.

Read receipts do not establish understanding

WhatsApp provides read information, including information for group messages. That can indicate interaction with a message; it does not prove that someone understood a procedure or accepted a particular responsibility. The same limitation applies to acknowledgements in any other messenger.

For a safety update, decide what response is needed. That might be an acknowledgement, a discussion, training or an assigned action. Keep the evidence appropriate to the purpose. Our meeting sign-off guide explains the distinction between receiving a record and agreeing with it.

Evaluate an alternative by its controls

Check access permissions, leaver handling, retention, retrieval, administrator controls and incident response. Ask how exports work and what they contain. Establish who can change a record and whether you can understand its history. No product label makes a practice compliant on its own.

Dentorb's staff messenger page describes its intended tracked-communication approach. Its My Portal page and tasks page show related workflows. Dentorb is pre-launch; confirm availability and the actual controls for your needs before relying on any product.

Make a controlled transition

Agree where official announcements and procedures belong, then explain the change to the team. Identify important existing records and handle them under an appropriate retention policy. Keep any social channel separate from sensitive practice work. Provide a clear route for urgent matters so colleagues are not left guessing which app to check.

Set realistic expectations about when staff are expected to respond, including outside working hours. Review whether the new process is followed and whether access is removed appropriately. For the wider evidence picture, see the CQC checklist.

Personal group chat vs governed team messaging

Question	Personal WhatsApp group	Governed practice messaging
Who controls access when someone leaves?	Group admins, manually	The practice, centrally
Where is the record held?	On each person's phone	In a practice-controlled system
Can you show who acknowledged a policy?	Read receipts only, can be switched off	Explicit acknowledgement, timestamped
Can you retrieve history for a complaint?	Depends on individuals exporting	Searchable by authorised staff
Patient information risk	High on personal devices	Controlled by permissions

Five rules to agree with your team this week

1. No patient-identifiable details in personal chats.
2. Rota changes and policy updates are confirmed in the official channel.
3. Leavers are removed on their last day.
4. Urgent clinical concerns go by phone or in person, then get recorded.
5. Social chat is fine — but it isn't where decisions live.

Sources and further reading

• ICO: data protection principles
• ICO: bring your own device guidance
• WhatsApp: exporting chat history
• WhatsApp: checking read receipts
• GDC: Standards for the Dental Team, Principle 4

This is practical guidance, not a finding that a particular practice or messaging arrangement breaches the law.