{"id":948,"date":"2019-02-21T14:32:34","date_gmt":"2019-02-21T14:32:34","guid":{"rendered":"https:\/\/cortadoblog1.wpengine.com\/whatsapp-business-gdpr-safe-use\/"},"modified":"2024-01-11T11:56:31","modified_gmt":"2024-01-11T11:56:31","slug":"whatsapp-business-gdpr-safe-use","status":"publish","type":"post","link":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/","title":{"rendered":"WhatsApp Business and GDPR: How to Use it Safely"},"content":{"rendered":"\n

WhatsApp is one of the most downloaded apps from the app stores. We provide the necessary background information and explain how correct WhatsApp business use in accordance to GDPR works.<\/p>\n\n\n\n

\"WhatsApp
Companies where WhatsApp is installed on business mobile phones are on thin ice. To use WhatsApp in accordance to EU GDPR, you need to take protective measures.<\/em> <\/figcaption><\/figure>\n\n\n\n

<\/p>\n\n\n\n

Companies that provide their employees with smartphones which are also used privately as part of a COPE or BYOD program must be prepared for the fact that WhatsApp is likely to be installed on these devices. And this means that companies without appropriate security measures can find themselves on thin ice  \u2013 a violation of GDPR is almost inevitable. <\/p>\n\n\n\n

What Is the Problem?<\/h2>\n\n\n\n

As soon as WhatsApp is installed on a smartphone, the app accesses the internal address book and creates a contact list. The data from the internal address book is sent to WhatsApp servers located in the United States and checked there. Data from non-WhatsApp users is also sent to these U.S. servers. If such personal data is passed on to third parties without the owner\u2019s consent, this is a clear GDPR violation.<\/p>\n\n\n\n

Without separating private and business contacts on the device, the contact data of your corporate contacts is passed on to third parties without their permission. In order to protect customer data from unauthorized access and to protect themselves from possible GDPR fines, some companies have taken radical measures.<\/p>\n\n\n\n

The automotive supplier Continental, for example, opted for a complete ban on WhatsApp for its 36,000 corporate smartphones. But such dramatic measurers aren\u2019t always necessary. What\u2019s important is that private and professional data and contacts are separated from each other on mobile devices.<\/p>\n\n\n\n

With Android devices<\/strong>, this has already been possible for some time with Android Enterprise (formerly Android for Work). The device has a work profile where business data is kept separate. Private apps cannot access this work profile, so in this case private WhatsApp use is not a problem for companies.<\/p>\n\n\n\n

It was more difficult for iOS devices<\/strong>, at least until March 2018. Up until the release of iOS 11.3, all apps accessed the same contact book. This security loophole was closed with the release of iOS 11.3 on March 29, 2018.<\/p>\n\n\n\n

Since then, it has also been possible to separate private and business contacts with iPhones and iPads. You can find more information about this in our blog post iOS: Ready for the EU’s GDPR with managed contacts<\/a><\/strong>.<\/p>\n\n\n\n

How Do You Realize WhatsApp Business Use in Accordance With EU GDPR?<\/h2>\n\n\n\n

For WhatsApp business use in accordance with GDPR you need a Mobile Device Management System (MDM)<\/a><\/strong>.<\/p>\n\n\n\n

Then the business Exchange account must be rolled out via such an MDM solution to protect business communication and contacts. All mail and business contacts are then located in the managed area on the smartphone.<\/p>\n\n\n\n

In addition, a policy must be set that excludes the exchange of data between managed and unmanaged apps. This ensures that the technical protection of corporate data as required by GDPR is implemented on the iOS device and that business contacts are not passed on to WhatsApp. This ensures that the organization is not violating GDPR regulations, even if employees use WhatsApp on BYOD or COPE devices.<\/p>\n\n\n\n

Our Cortado MDM offering<\/strong><\/a> enables an especially rapid implementation of GDPR-compliant WhatsApp usage. A GDPR-compliant policy is already preconfigured in the web-based console. This means that all necessary security measures are automatically made, and this applies to both Android and iOS devices.<\/p>\n\n\n\n

Ensure you aren\u2019t on thin ice when it comes to GDPR and read our free white paper, explaining how Cortado MDM<\/a><\/strong> can help.<\/p>\n\n\n\n

Let our customers RMD Wasserstra\u00dfen<\/a>, Maschinen-Grupp<\/a> or the Landeszeitung f\u00fcr die L\u00fcneburger Heide<\/a> inspire you on how they enable their employees to use WhatsApp privately.<\/p>\n\n\n\n

\"\"
Mobile Device Management for Beginners<\/strong>

This free white paper shows how an MDM solution can help organizations meet EU-GDPR requirements and implement their own compliance policies on smartphones.

Download Free Whitepaper \u00bb<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Companies that provide their employees with smartphones which are also used privately must be prepared for the fact that WhatsApp is likely to be installed on these devices. A violation of the GDPR is therefore almost inevitable. We will tell you the background and explain how you realize WhatsApp business use in accordance to GDPR.<\/p>\n","protected":false},"author":5,"featured_media":1440,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[28],"tags":[40],"class_list":["post-948","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-it-administration","tag-data-security"],"acf":[],"yoast_head":"\nSafely Navigating Business Use: WhatsApp Business and GDPR<\/title>\n<meta name=\"description\" content=\"WhatsApp is one of the most downloaded apps from the app stores. We explain how correct WhatsApp business use in accordance to GDPR works.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WhatsApp Business and GDPR: How to Use it Safely\" \/>\n<meta property=\"og:description\" content=\"WhatsApp is one of the most downloaded apps from the app stores. We explain how correct WhatsApp business use in accordance to GDPR works.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\" \/>\n<meta property=\"og:site_name\" content=\"Cortado Blog\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-21T14:32:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-01-11T11:56:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1025\" \/>\n\t<meta property=\"og:image:height\" content=\"474\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Simone Fulton\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Simone Fulton\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\"},\"author\":{\"name\":\"Simone Fulton\",\"@id\":\"https:\/\/blog.cortado.com\/en\/#\/schema\/person\/d6c64de7196768becc634f42cca6b14d\"},\"headline\":\"WhatsApp Business and GDPR: How to Use it Safely\",\"datePublished\":\"2019-02-21T14:32:34+00:00\",\"dateModified\":\"2024-01-11T11:56:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\"},\"wordCount\":676,\"publisher\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg\",\"keywords\":[\"Data Security\"],\"articleSection\":[\"IT Administration\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\",\"url\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\",\"name\":\"Safely Navigating Business Use: WhatsApp Business and GDPR\",\"isPartOf\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg\",\"datePublished\":\"2019-02-21T14:32:34+00:00\",\"dateModified\":\"2024-01-11T11:56:31+00:00\",\"description\":\"WhatsApp is one of the most downloaded apps from the app stores. We explain how correct WhatsApp business use in accordance to GDPR works.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage\",\"url\":\"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg\",\"contentUrl\":\"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg\",\"width\":1025,\"height\":474,\"caption\":\"M\u00f6chten Mitarbeiter WhatsApp auf beruflich genutzten Handys einsetzen, stellt dies Unternehmen vor besondere Herausforderungen in Sachen Datenschutz.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.cortado.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WhatsApp Business and GDPR: How to Use it Safely\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.cortado.com\/en\/#website\",\"url\":\"https:\/\/blog.cortado.com\/en\/\",\"name\":\"Cortado Blog\",\"description\":\"News from Cortado\",\"publisher\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.cortado.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blog.cortado.com\/en\/#organization\",\"name\":\"Cortado Blog\",\"url\":\"https:\/\/blog.cortado.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.cortado.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blog.cortado.com\/wp-content\/uploads\/cortado-blog-logo.svg\",\"contentUrl\":\"https:\/\/blog.cortado.com\/wp-content\/uploads\/cortado-blog-logo.svg\",\"width\":226,\"height\":32,\"caption\":\"Cortado Blog\"},\"image\":{\"@id\":\"https:\/\/blog.cortado.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.cortado.com\/en\/#\/schema\/person\/d6c64de7196768becc634f42cca6b14d\",\"name\":\"Simone Fulton\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.cortado.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5bb26a2207d3999bcb7150e2eff9c3b0?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5bb26a2207d3999bcb7150e2eff9c3b0?s=96&d=mm&r=g\",\"caption\":\"Simone Fulton\"},\"url\":\"https:\/\/blog.cortado.com\/en\/author\/siklu\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Safely Navigating Business Use: WhatsApp Business and GDPR","description":"WhatsApp is one of the most downloaded apps from the app stores. We explain how correct WhatsApp business use in accordance to GDPR works.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/","og_locale":"en_US","og_type":"article","og_title":"WhatsApp Business and GDPR: How to Use it Safely","og_description":"WhatsApp is one of the most downloaded apps from the app stores. We explain how correct WhatsApp business use in accordance to GDPR works.","og_url":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/","og_site_name":"Cortado Blog","article_published_time":"2019-02-21T14:32:34+00:00","article_modified_time":"2024-01-11T11:56:31+00:00","og_image":[{"width":1025,"height":474,"url":"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg","type":"image\/jpeg"}],"author":"Simone Fulton","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Simone Fulton","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#article","isPartOf":{"@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/"},"author":{"name":"Simone Fulton","@id":"https:\/\/blog.cortado.com\/en\/#\/schema\/person\/d6c64de7196768becc634f42cca6b14d"},"headline":"WhatsApp Business and GDPR: How to Use it Safely","datePublished":"2019-02-21T14:32:34+00:00","dateModified":"2024-01-11T11:56:31+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/"},"wordCount":676,"publisher":{"@id":"https:\/\/blog.cortado.com\/en\/#organization"},"image":{"@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg","keywords":["Data Security"],"articleSection":["IT Administration"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/","url":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/","name":"Safely Navigating Business Use: WhatsApp Business and GDPR","isPartOf":{"@id":"https:\/\/blog.cortado.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage"},"image":{"@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg","datePublished":"2019-02-21T14:32:34+00:00","dateModified":"2024-01-11T11:56:31+00:00","description":"WhatsApp is one of the most downloaded apps from the app stores. We explain how correct WhatsApp business use in accordance to GDPR works.","breadcrumb":{"@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#primaryimage","url":"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg","contentUrl":"https:\/\/blog.cortado.com\/wp-content\/uploads\/fi-whatsapp-im-unternehmen.jpg","width":1025,"height":474,"caption":"M\u00f6chten Mitarbeiter WhatsApp auf beruflich genutzten Handys einsetzen, stellt dies Unternehmen vor besondere Herausforderungen in Sachen Datenschutz."},{"@type":"BreadcrumbList","@id":"https:\/\/blog.cortado.com\/en\/whatsapp-business-gdpr-safe-use\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.cortado.com\/en\/"},{"@type":"ListItem","position":2,"name":"WhatsApp Business and GDPR: How to Use it Safely"}]},{"@type":"WebSite","@id":"https:\/\/blog.cortado.com\/en\/#website","url":"https:\/\/blog.cortado.com\/en\/","name":"Cortado Blog","description":"News from Cortado","publisher":{"@id":"https:\/\/blog.cortado.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.cortado.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/blog.cortado.com\/en\/#organization","name":"Cortado Blog","url":"https:\/\/blog.cortado.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.cortado.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/blog.cortado.com\/wp-content\/uploads\/cortado-blog-logo.svg","contentUrl":"https:\/\/blog.cortado.com\/wp-content\/uploads\/cortado-blog-logo.svg","width":226,"height":32,"caption":"Cortado Blog"},"image":{"@id":"https:\/\/blog.cortado.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/blog.cortado.com\/en\/#\/schema\/person\/d6c64de7196768becc634f42cca6b14d","name":"Simone Fulton","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.cortado.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/5bb26a2207d3999bcb7150e2eff9c3b0?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5bb26a2207d3999bcb7150e2eff9c3b0?s=96&d=mm&r=g","caption":"Simone Fulton"},"url":"https:\/\/blog.cortado.com\/en\/author\/siklu\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/posts\/948"}],"collection":[{"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/comments?post=948"}],"version-history":[{"count":0,"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/posts\/948\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/media\/1440"}],"wp:attachment":[{"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/media?parent=948"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/categories?post=948"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.cortado.com\/en\/wp-json\/wp\/v2\/tags?post=948"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}