Work WhatsApp groups: what they cost your team, and when to replace them

It’s 22:40 on a Thursday. Priya, the GM, posts in the staff group: Saturday brunch opens at nine now, not ten, so the opening shift starts at eight. Two people react with a thumbs up. Then someone asks who’s taken the blue tongs home again, and thirty messages later the rota change is somewhere near the top of a scroll nobody’s going to do.

On Saturday at eight, Callum is there. Jess isn’t. She’s not lying when she says she never saw it.

You’ll recognise this. It’s free, everyone already has it, and for a small team a work WhatsApp group genuinely works.

Should you run your team on a work WhatsApp group?

A work WhatsApp group is fine for a small team’s social chat. It’s a poor place to run the shift. Members see each other’s numbers, leavers keep access until someone removes them, seeing a message isn’t confirming it, and history sits in private chats you don’t control. In the UK, if you run work through it, you’re its data controller.

Why every rota ends up in a WhatsApp group

Nobody decides to run a workplace on WhatsApp. A new site opens, someone makes a group for the opening team, and a year later it holds rotas, cover requests, sickness and Friday night photos.

In a 2024 survey by workforce software company Quinyx, 55% of UK frontline workers said WhatsApp was their main channel with management, and in hospitality, WhatsApp use rose to 75%.

And it does some things really well. Messages arrive instantly, and nobody needs a login or training. If you run one café with six people who all get on, you may never need anything else.

Seven problems with running a team on WhatsApp

Everyone sees each other’s personal numbers

In an ordinary WhatsApp group, members can see each other’s phone numbers. Add forty people, including last August’s agency cover, and they all have each other’s mobiles.

Leavers keep reading your messages

When someone leaves, someone has to remember to remove them from the group. Until they do, an ex-employee can still see the rota, the delivery schedule, the new alarm code someone helpfully posted, and everyone’s numbers.

The opposite mistake happens too. In the clearest UK case, the ICO’s reprimand of NHS Lanarkshire, someone was added to a staff WhatsApp group by mistake, which counted as a disclosure to an unauthorised person. It was health data, but the slip is the same one.

The important message scrolls away

WhatsApp’s message info will show you who has read a message. What it can’t do is ask “have you understood this?” and only count it once someone has confirmed. A “read” in message info on the new allergen routine means the message was opened, not that anyone took it in.

So you can see who opened it, but not who’s taken it in or agreed to it. We go into the multi-site side of this in team communication across locations.

Pings after the shift has ended

The work group sits next to the family chat, so the 23:15 cover request lands on someone’s day off, and the part-timer who wants more hours feels they’d better answer.

Where UK law stands:

• No right to disconnect yet. There’s no legal right to disconnect in UK law. It isn’t in the Employment Rights Act 2025, and the planned code of practice hasn’t reached consultation (Lewis Silkin, September 2026).
• On call can count as working time, depending on how much it restricts what someone can do with their time (ACAS on on-call work). Whether answering the odd rota message counts isn’t settled.
• Shift notice is coming. Under the Employment Rights Act 2025, zero-hours and low-hours workers will get a right to reasonable notice of shifts and changes to them, and pay when a shift is cancelled, moved or cut short at short notice. ACAS lists these for 2027, with no start date yet and the notice periods and amounts still to be set.

Our view: when those rules arrive, “I posted it in the group” won’t be much of a record of when someone was told.

Sickness, grievances and banter in one thread

“Can’t come in, I’ve been sick all night.” That’s health information, shared with the whole team, sitting next to a complaint about a supervisor and the jokes.

University of Salford researchers found more than 500 UK employment tribunal cases in 2024 alone that involved WhatsApp, from people removed from groups to screenshots used as evidence. In one case reported by People Management, a worker was awarded about £25,000 over racist and sexist remarks in a group that included her line manager.

From 30 October 2026, employers must take “all reasonable steps” to prevent sexual harassment (ACAS). It’s fair to ask yourself how a staff chat you can’t see or moderate fits with that.

You don’t own the record

Nobody at the business owns the group. It’s run by whoever happens to be admin, and the history sits in each member’s private WhatsApp, not with you. Lose a phone or change a number without a backup and it goes too: at Lanarkshire, chat history was lost when phone numbers were recycled.

So the message you need for a grievance or an EHO visit is in somebody’s private chats, if it exists at all.

Not everyone reads English first

In plenty of UK kitchens and housekeeping teams, English is a second or third language. A fast thread full of slang and abbreviations is hard work, and the allergen update is exactly the message you can’t afford to lose in translation.

Is WhatsApp GDPR compliant for staff groups?

WhatsApp isn’t banned for work, and using it isn’t automatically a breach. The question is whether you’ve got controls around it. Three things the ICO has said:

1. You’re the controller. The ICO’s guidance for employers says that if you use platforms such as WhatsApp for business purposes, you’re the controller for that information and must search it when answering a subject access request.
2. Private apps are the weak spot. The ICO says it’s “not usually appropriate” for staff to hold colleagues’ data in places the business doesn’t control, and names private instant messaging apps among them (ICO right of access guidance). It also says you should have a policy on it.
3. “Everyone agreed” isn’t much cover. The ICO says consent is not usually the right basis in employment, because of the imbalance of power.

At Lanarkshire there was no WhatsApp policy, no risk assessment and no contract with WhatsApp, and staff assumed it was fine because the app was encrypted. The outcome was a reprimand, not a fine. Encryption protects messages in transit. It doesn’t decide who’s in the group or where the record goes.

This is a practical guide, not legal advice. For your own situation, check the specifics with someone qualified.

Can you make staff join a work WhatsApp group?

On your own phone

No UK law deals with this directly, so it comes down to the contract and what’s reasonable. What makes a WhatsApp group extra sensitive isn’t the phone. It’s that work runs on your private number, in your private app, next to your private contacts. Employment lawyers also advise keeping work messages inside contracted hours, because of the risk of claims under the Working Time Regulations, minimum wage rules or work-related stress.

If you’re on shift: if you’d rather not have work in your private WhatsApp, say so, and ask how else you’ll get the rota. If you’re the manager: have that answer ready.

Outside working hours

There’s no specific UK law on out-of-hours messages yet. Your contract, the rest rules in the Working Time Regulations and what’s reasonable all come into it. A fair rule is simple: nobody’s expected to reply off shift, and anything that needs an answer goes out in working hours or gets a phone call.

If you’re on shift: check what your contract says about being available. If you’re the manager: write the rule down so nobody has to guess.

If you keep WhatsApp: house rules for a work group

If the group works for your team, keep it, but pin some rules:

1. Say what the group is for. Rota updates and quick heads-ups, nothing else.
2. No sickness details. “I’m off sick today, I’ve told Priya” is enough.
3. No replies expected off shift. Silence on your day off is fine.
4. Admins remove leavers on their last day. Name two admins so it never depends on one person.
5. No codes, passwords or customer details. Ever.
6. Important changes get confirmed somewhere else. A rota change gets a direct message or a call to each person affected.
7. Keep the social chat separate. Let the team run its own banter group without you in it.
8. Have a written policy. The ICO says you should have one covering colleagues’ data in private messaging apps, and it gives everyone something to point to.

Five signs it’s time to replace the group

If none of these apply, a well-run group is probably fine. If two or more do, you’ve outgrown it.

• You have more than one site. Ten groups across ten sites means ten versions of the truth.
• People come and go every month. Every leaver is a removal someone has to remember.
• Documents and checklists travel as photos. The handbook is a blurry picture from 2023, and nobody knows which version is current. (More on that in keeping a handbook your frontline team actually uses.)
• Part of the team doesn’t read English first.
• You’d need to prove it later. Allergen briefings, rota changes, safety updates: anything you’d want to show an inspector, an insurer or a tribunal.

Isn’t a work app on my phone the same thing?

No. Most staff apps live on the same phone as WhatsApp, Todolo included, and that’s fine. The problem was never the phone. It’s running work through a private app. A work app built for the job changes four things:

• Your number can stay private. Colleagues don’t need it to reach you.
• You control your own notifications, so a day off can stay off.
• Access follows employment. When someone is offboarded in your scheduling system, they’re offboarded in the work app too, without anyone having to remember.
• The work stays with the business, not scattered across personal chats.

To make it fair, explain why you’re switching, let people set their notifications on day one, and agree in writing what’s expected outside working hours.

What to look for in a WhatsApp alternative for staff

The questions that matter for a team on shift:

• Does it work without a company email or a desk? See what a mobile app for deskless workers needs to do.
• Does access follow employment? Ask how new starters get in and how leavers lose access, and who has to remember to do it.
• Can people keep their number private and set their own notifications?
• Can you see who confirmed the important things? Not “delivered”. Confirmed.
• Is it targeted? The kitchen shouldn’t scroll past the housekeeping rota.
• Can people read it in their own language?
• Is the rest of the shift there too? The message, the checklist it turns into, the handbook and the training.

Todolo is one app for the whole shift: tasks and checklists, communication, documents and handbooks, and training, in an employee app that needs no computer or company email address. It’s a work app on the same phone, without the downsides. Staff can keep their number private and limit their own notifications.

On the communication side:

• Feeds for what everyone needs to know, targeted by role and workplace. Important posts require a confirmation before they count as read, and you can see who confirmed.
• Chats for what a few people need to settle, with channels by site and role that mirror how your organisation is actually put together.
• Translation. Every message can be read in your own language, with the original one click away.
• From post to checklist. An announcement can become a checklist, and TOD, Todolo’s AI teammate, answers questions about routines and policies right in the chat.

Todolo connects with the scheduling system you already use, such as Planday, and if you use something else, we’ll connect that too. When someone is offboarded there, they’re offboarded in Todolo automatically. New starters can get their account the same way, at the right site with the right permissions, and with Planday their shifts show on the same home screen as today’s checklist. Todolo doesn’t build your rota; it puts it next to everything else.

Moving your team off WhatsApp without a revolt

Take WhatsApp away badly and you’ll have a new unofficial group by Friday. So:

1. Pilot one site with a GM who’s keen.
2. Move the rota and announcements first. That’s what staff check anyway.
3. Leave the social group alone. It’s theirs. You just stop running the business in it.
4. Set a switch-off date for work messages in the old group, and tell everyone well before it.
5. Archive, don’t delete. Export what you might need later, then close the work group.

Work WhatsApp group questions

Do I have to be in a work WhatsApp group on my personal phone?

It depends on your contract and what’s reasonable. No UK law deals with it directly. What makes a WhatsApp group sensitive is that it runs on your private number and your private app. If you’d rather not, or want to leave, say so, and agree with your manager how you’ll get rota changes.

Is WhatsApp GDPR compliant for work?

Not automatically, and not automatically a breach either. If you use it for business, the ICO says you’re the controller for that information. Its guidance says keeping colleagues’ data in private messaging apps is not usually appropriate, so you need a policy, controls and a plan for leavers.

Do I have to reply to work WhatsApp messages outside working hours?

There’s no specific UK law on it, and no legal right to disconnect in UK law yet. It isn’t in the Employment Rights Act, and the planned code of practice hasn’t reached consultation. If you’re not on call, you shouldn’t be expected to reply. Check your contract, and ask your manager to agree a clear rule.

Can WhatsApp messages be used in a disciplinary or tribunal?

Yes. Salford researchers found more than 500 UK tribunal cases in 2024 involving WhatsApp, often with screenshots as evidence. Being in a closed group doesn’t make a message private. If it’s about work or colleagues, it can end up in a disciplinary or a tribunal bundle.

What is the best WhatsApp alternative for staff communication?

The best one lets staff keep their number private and set their own notifications, follows your scheduling system when people leave, makes important posts count as read only once someone confirms, translates messages and keeps checklists and documents in the same place. Todolo is built that way, as one app for the whole shift.

Start with your own group

Open your staff group and scroll back a week. Count the messages that were actually about the shift, and ask which of those you could prove everyone actually confirmed. That number is your answer.

In thirty minutes we’ll show you what your rota updates, announcements and checklists would look like in Todolo, on the phones your team already carries, without the downsides of a private group. There’s no long contract to sign, and there’s a 30-day money-back guarantee.

Book a 30-minute demo