FOI ref: FOI-2024-1868
You asked
What is your policy in regards to retaining and deleting of messages using the WhatsApp platform?
Do officers dealing with FOI and GDPR have access to those messages if so can you provide a copy of the policy?
Can you give me a copy of the last review of this policy?
We said
Thank you for your request.
The UK Statistics Authority's Document and Records Management Policy, which aligns to the UK Gov Non Corporate Communications Policy Guidance, states 'no information should be shared via non-corporate communication systems, such as but not limited to WhatsApp, private email, SMS, Webex and Zoom, without permission from the Cyber Security Team. Records created or received in such systems should be transferred to the appropriate corporate system or application as applicable'.
In the event that information sent via WhatsApp were subject to an information rights request, this would be considered on a case by case basis in accordance with all relevant legislation and with regard to ICO guidance and best practice.