Search

How can we help?

Icon

WhatsApp in the workplace: Is it legally safe?

WhatsApp is a convenient and quick way to communicate with colleagues and clients, but is it legally safe to use in the workplace?

In this podcast, Lucy White and Monica Mastropasqua, members of the Data Protection team at Clarkslegal, will address frequently asked questions from clients regarding the use of WhatsApp at work.

Key topics include:

  • The difference between personal and professional boundaries when using WhatsApp
  • The fact that WhatsApp messages are not stored on company servers
  • The widespread use of WhatsApp on personal devices
  • Commonly overlooked issues related to data retention and GDPR compliance
  • Steps employers can take to mitigate risks

If your organisation needs help reviewing your GDPR policies and practices or employee training on data protection requirements, please contact our Data Protection Lawyers.

Meet the speakers

Lucy White

Senior Solicitor

View profile

+44 118 960 4655

Monica Mastropasqua

Trainee Solicitor

View profile

+44 20 7539 8021

Read, listen and watch our latest insights

art
  • 26 November 2025
  • Employment

The Data Use and Access Act 2025 – how to handle data protection complaints

This article will focus on, in particular, the requirement for data controllers to ensure that, by June 2026, appropriate complaint procedures are put in place (s 103).

art
  • 12 November 2025
  • Employment

GDPR: Who are data controllers and processors?

Controllers and processors have a different set of responsibilities, and have various responsibilities when dealing with data breaches.

art
  • 23 October 2025
  • Privacy and Data Protection

AI and Data Protection – Is Fair and Transparent Privacy Possible?

We live in a digital world. Every facet of daily life is governed to some degree by phone, web or some form of connected technology.

art
  • 13 October 2025
  • Privacy and Data Protection

AI and Data Protection: key legal developments in 2025 – 2026

The rapid integration of artificial intelligence into the workplace continues to reshape how organisations manage data, recruitment, and decision-making. Alongside this technological shift, UK and international regulators are introducing new legal frameworks designed to balance innovation with accountability.

art
  • 26 September 2025
  • Privacy and Data Protection

PECR – fines, direct marketing and cookies

The Data (Use and Access) Act 2025 received Royal Assent on 19 June 2025 which makes changes to the UK’s data regime, amending the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003.

art
  • 05 September 2025
  • Privacy and Data Protection

When Ignoring a DSAR Becomes a Criminal Offence

On 3 September 2025, Mr Jason Blake appeared at Beverley Magistrates Court and was fined for failing to respond to a data subject access request (DSAR).