Apply quickly and easily: But how secure is WhatsApp?

_UIMC: Data protection in the application process_

The shortage of skilled workers has arrived in many industries. This fact and the special requirements of Generation Z mean considerable challenges for companies when recruiting employees. Quite a few companies make use of modern communication channels and dispense with expensive job advertisements in the weekend editions of newspapers, most of which are hardly read by the target group anyway. The use of the messenger platform WhatsApp seems particularly tempting for companies and public authorities. Worldwide, 1.5 billion people use this popular service. It reaches the people you want to reach. Many companies are already using the popular messenger service to simplify and speed up the application process. However, the use of WhatsApp is being scrutinized under data protection law. "The use of WhatsApp in the application process poses a significant data protection risk, as personal data can be processed outside the EU, which does not meet the requirements of the GDPR," explains Dr. Jörn Voßbein, UIMC Managing Director and experienced data protection expert. The following is an overview of the advantages and points to note regarding the use of WhatsApp:_

WhatsApp in the application process

WhatsApp enables fast and direct communication between applicants and companies. Especially in times of a shortage of skilled workers, it is crucial not only to contact applicants efficiently, but also to offer them a simple and convenient way to get in touch. WhatsApp can be used, for example, to submit applications, quickly clarify queries about applications or easily arrange appointments for interviews.

Data protection concerns

Despite the advantages, there are considerable concerns regarding data protection. WhatsApp belongs to the Facebook group (Meta) and is therefore subject to the company's data protection regulations. In particular, the transfer of personal data to servers in the USA is a problem, as these do not comply with the strict data protection standards of the European Union.

According to the General Data Protection Regulation (GDPR), companies must ensure that personal data is only processed with the express consent of the data subject and in compliance with high security standards. This also applies to communication via WhatsApp.

Recommendations for companies

The UIMC recommends that companies wishing to use WhatsApp in the application process take the following measures:

1. transparency and consent: Applicants should be clearly informed that their data will be processed via WhatsApp and explicitly give their consent.

2. offer alternatives: Companies should offer alternative communication channels for applicants to choose from in order to minimize data protection risks. For example, a QR code with a link to a short application form on the company's own website.

3. security measures: WhatsApp should only be used via protected devices and it should be ensured that no sensitive data is exchanged via the messenger.

4. data protection training: Employees should receive regular training on data protection regulations and the correct handling of applicant data.

Conclusion

Although the use of WhatsApp in the application process can significantly simplify communication, it also harbors considerable data protection risks. Companies must ensure that they comply with the legal requirements of the GDPR and inform their applicants transparently. This is the only way to maintain a balance between efficient communication and the protection of personal data. "Companies should be very careful and aware of the data protection consequences when using WhatsApp to communicate with applicants," advises data protection expert Dr. Jörn Voßbein.

UIMC Dr. Voßbein GmbH & Co KG
Otto-Hausmann-Ring 113
42115 Wuppertal
Germany

https://www.uimc.de/

Herr Dr.Jörn Voßbein
0202 / 946 7726 200

consultants@uimc.de

We are a medium-sized management consultancy specializing in data protection and information security. Founded in 1997, we are one of the market leaders in data protection and, as a full-range provider, we offer everything from individual tools to complete outsourcing in the form of an external data protection officer, including analysis, consulting, implementation and training.

This release was published on openPR.