[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-638884-105":59,"doc-detail-638884-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","whatsapp-guidance-for-bma-members-and-staff-data-protection-risks-and-policy","WhatsApp guidance for BMA members and staff - Data protection risks and policy","","Guidance explains how WhatsApp may affect BMA business by outlining key data protection considerations, including cross-border data transfer outside the UK and EEA, limitations on data access, deletion and portability, and challenges in auditing who accessed shared information. It addresses encryption assumptions, potential security vulnerabilities, and risks around data stored off mobile devices, offering practical expectations for BMA members and staff and links to relevant BMA policies and reporting routes.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/whatsapp-guidance-for-bma-members-and-staff-data-protection-risks-and-policy/638884/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/whatsapp-guidance-for-bma-members-and-staff-data-protection-risks-and-policy/638884.png","ImageObject",300,407,{"name":92,"@type":93},"Asher","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-29","2026-10-22",true,{"@type":102,"interactionType":103,"userInteractionCount":8},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Why does WhatsApp usage pose data protection risks for BMA business?","Question",{"text":112,"@type":113},"WhatsApp transfers data outside the UK and EEA and cannot fully comply with data protection rights such as access, erasure, and portability. It also limits auditability of who accessed shared data.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What should users be careful about when sharing information on WhatsApp?",{"text":117,"@type":113},"Users should share only appropriate data and understand that contacts may access other personal information. Confidential committee-related business must not be discussed in groups that include people outside the committee.",{"name":119,"@type":110,"acceptedAnswer":120},"How should BMA staff handle WhatsApp groups for work purposes?",{"text":121,"@type":113},"Staff should notify line managers before using WhatsApp for business messaging and should not feel compelled to use it. WhatsApp groups should have identified administrators, require consent before adding staff, support GDPR searchability for personal data, and avoid anonymous or pseudonymous participation.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},638884,1792700271,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":8,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":24,"language":139,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":140,"faqs":141,"seo_title":142,"seo_description":67,"update_tm":129,"read_time":143},687197207639,"https://ap-avatar.wpscdn.com/davatar_a8503ba1806abce46bf441b54a3ca4cd","The use of WhatsApp by BMAstaff and members for BMA business  \nBMA Corporate and member development BMA Communications and policy  \n[bma.org.uk](bma.org.uk)  \n1. Introduction  \nWhatsApp is an instant messaging tool owned by Meta that allows users to send and share text and voice messages, make voice and video calls, share images, documents, user location and other media. WhatsApp operates via a mobile device’s internet connection and is, subject to any data charges, a free-for-use service. It is regularly used by BMA members who are on committees and occasionally by BMA staff for business purposes, as well as more common personal/social uses.  \nWhatsApp is a widely used and useful communication tool and is likely to be continued to be used to conduct BMA business.  \nHowever, WhatsApp presents certain risks, including non-compliance with data protection laws such as issues surrounding consent, data transfer, access, deletion and portability. We have considered the value gained by the BMA against the potential risks arising from non-compliance with data protection laws.  \nWe have developed this WhatsApp guidance for BMA members and staff about to cover how data protection laws, including the UK General Data Protection Regulation and Data Protection Act (2018), may impact on the use of WhatsApp for business purposes.  \nThis guidance must be read in conjunction with relevant BMA social media policies which set out expected behaviours for staff and members. Our approach is very much in line with the NHS in England and the GMC, both of which have recently issued guidance on the use of social media and instant messaging (see: NHS Guidance and GMC Guidance) .  \n2. General considerations for the BMA  \nFor the BMA there are some important areas to take into consideration regarding the use of WhatsApp. These include that:  \na) WhatsApp is one of the Meta group of companies. This means data shared via WhatsApp will be transferred outside the UK and the European Economic Area including to the United States. WhatsApp cannot fully comply with data protection laws, such as a right to data access, deletion/erasure, and data portability. For example, although a user may have deleted a WhatsApp message, any data sent will remain on another contact’s mobile device.  \nb) Users should be careful with what data is shared. Contacts may also be able to access other user’s personal information. It is not possible to audit who has had access to data that has been shared via WhatsApp.  \nc) Although WhatsApp offers end-to-end encryption of data shared between the user and a contact, recent media coverage suggests the existence of some technology flaws. Users should not assume WhatsApp offers security of messaging and should be aware of potential WhatsApp vulnerabilities.  \nd) Users should also be aware that any data stored off mobile devices may not be subject to encryption. Users must be careful not to share mobile devices. No further secondary PIN is required to access data on WhatsApp or remote-wipe facility, where data would be removed if the device were to be lost or stolen.  \nGiven the issues highlighted above, users are encouraged to carefully consider the benefits and risks of using WhatsApp for BMA business.  \n3. BMA policies and guidance  \nUsers will be familiar with the BMA Code of Conduct and are encouraged to review the BMA’s Privacy Policy, Acceptable Use Policy, Technology Terms and Conditions and GDPR, Use of Social Media and Email Guidelines which are published on the BMA website.  \nAny concerns about member conduct which may not be in line with the BMA Code of Conduct should be reported through the BMA Code of Conduct Support line on 033 3212 3618. Where staff conduct is an issue, concerns should be shared in the first instance directly with the relevant staff director or in writing to the BMA co-chief executives.  \nWhere there is a breach of the acceptable use policy, the BMA will take action regarding that contravention when it is brou","cbCaifyWuRT4STBj","https://ap.wps.com/l/cbCaifyWuRT4STBj","pdf",168437,"English","# Introduction\n# General considerations for the BMA\n# BMA policies and guidance\n# Considerations for members and staff","[{\"question\":\"Why does WhatsApp usage pose data protection risks for BMA business?\",\"answer\":\"WhatsApp transfers data outside the UK and EEA and cannot fully comply with data protection rights such as access, erasure, and portability. It also limits auditability of who accessed shared data.\"},{\"question\":\"What should users be careful about when sharing information on WhatsApp?\",\"answer\":\"Users should share only appropriate data and understand that contacts may access other personal information. Confidential committee-related business must not be discussed in groups that include people outside the committee.\"},{\"question\":\"How should BMA staff handle WhatsApp groups for work purposes?\",\"answer\":\"Staff should notify line managers before using WhatsApp for business messaging and should not feel compelled to use it. WhatsApp groups should have identified administrators, require consent before adding staff, support GDPR searchability for personal data, and avoid anonymous or pseudonymous participation.\"}]","WhatsApp guidance for BMA members and staff - Data protection risks and policy | PDF",13]