WhatsApp in schools.
Almost every school is touched by WhatsApp, and very few chose it. Parent class groups form on their own, staff groups fill the gap left by email, and both end up carrying things nobody intended them to carry. This is a plain summary of the rules that apply to each, and what a school communication policy should say.
Parent WhatsApp groups, and the school's position
A class parent group chat is not the school's group. It is usually started by a parent, run by parents, and the school has no standing in it. That is worth stating internally, because staff are regularly asked to intervene in them.
Schools generally cannot moderate a parent group and should be careful about trying. What a school can do is set expectations: publish the official routes for anything that matters, say plainly that a message in a parent group is not a message to the school, and remind parents that a concern about a child, a member of staff or another family belongs in a complaint or a safeguarding referral rather than in a group chat.
The friction is real. Misinformation moves faster in a class group than any newsletter, and staff are sometimes discussed there in ways that are distressing. The honest answer is that the school's remedy is its own communication being fast and clear enough to be the thing parents rely on, not an attempt to police a channel it does not own.
Should a school use WhatsApp to communicate with parents?
Some do, usually for trips, clubs and reminders, and it is popular because it gets read. Before adopting it, three things need answering.
- Whose number is it? A member of staff using their personal WhatsApp to message parents is exposing their own phone number and blurring a professional boundary that is hard to restore.
- Where does the record go? Messages to parents about a child are school records. On WhatsApp they are not in any school system, cannot be searched, and cannot be retained or deleted to the school's schedule.
- Who is in the group? A parent group created by the school shares every parent's mobile number with every other parent. That is a disclosure of personal data the school made, and it needs a basis and, realistically, consent.
Most schools that think it through end up using a school communication platform or their MIS for anything official, and reserving WhatsApp for nothing at all. That is a defensible position and easier to hold than a partial one.
Staff groups, safeguarding and data protection
A staff group chat is the higher risk of the two, because it carries things about children. Concerns get raised there and go nowhere formal; pupils and families are named; and none of it can be produced later when a review asks what the school knew.
The data protection position follows: once a message names a pupil it is personal data the school is likely responsible for, held somewhere the school cannot search, retain or delete. That reaches a subject access request, a retention schedule and a possible breach report all at once.
We cover this in detail, including whether staff can be required to join and whether messages can be used in disciplinary proceedings, in the guide to staff WhatsApp groups in schools.
Can WhatsApp messages be used in a disciplinary context?
Yes. Messages in a staff group are not private in a way that protects the sender, and they are used in disciplinary processes and in employment tribunals. The test is whether the conduct affects the employment relationship, not whether it happened on a school system.
The same applies to pupils in a different form. Messages between pupils are outside the school's systems, but where they affect the school - bullying, sharing images, threats - the school's behaviour policy still engages, and schools regularly deal with incidents that began in a group chat at the weekend.
What the 24-hour rule actually means
This comes up in school discussions and is usually a misunderstanding worth clearing up, because two different things share the name.
The genuine 24-hour rule belongs to the WhatsApp Business Platform, not to ordinary WhatsApp. It means a business may reply freely to a customer for 24 hours after that customer's last message, and outside that window may only send pre-approved template messages. It applies to organisations using the commercial API, and it does not apply to a class group chat or a staff group.
The other 24-hour rule is a local convention: a school policy saying staff will not respond to messages outside working hours, or that parents should allow a working day for a reply. That is a workload and boundaries measure and a sensible thing to have. It is a school's own rule, not a WhatsApp feature, and calling it "the 24-hour rule" causes confusion in both directions.
Age limits and pupils
WhatsApp's minimum age is 13 in the UK. In practice younger children use it, and schools field the consequences without having any locus over the accounts.
Two practical points. A school should not create groups containing pupils on a consumer messaging app - staff and pupils in a private chat is a safeguarding risk that most codes of conduct already prohibit outright. And online-safety teaching is the school's real lever here: group chat dynamics, sharing images, and how to report, taught as part of the curriculum rather than in response to an incident.
The NSPCC and the UK Safer Internet Centre both publish material aimed at parents that a school can circulate rather than write.
What a school communication policy should cover
- The official channels, and what each is for, so a rule that forbids also tells people where to go.
- That parent group chats are not school channels, and a message there is not a message to the school.
- That staff do not use personal accounts or personal numbers to contact parents or pupils.
- The line on pupil and safeguarding content: never in a channel the school does not own.
- How safeguarding concerns reach the designated safeguarding lead, whatever channel they started in.
- Response-time expectations, in both directions.
- What happens when the policy is breached, linked to the staff code of conduct.
Then make the sanctioned channel genuinely quicker than the alternative, or the policy is a statement of intent. That is the part schools most often skip, and it is the part that decides whether anything changes.
Where to read more
Keeping children safe in education covers the safeguarding duties, and the ICO the data protection ones. NSPCC Learning and the UK Safer Internet Centre publish the pupil-facing online safety material.
This page is a summary, not legal advice.
ComplyChat gives work conversations a channel your organisation owns, on the record from the first message, filing into your own Microsoft 365 once your tenant is connected. There is no WhatsApp, Signal or Meta anything in the path, and we cannot see a personal phone or reach a conversation that has already happened - no lawful product can.
How it works · Why us · Pricing · FAQ