WhatsApp messages as evidence

A message is a document

In civil proceedings and tribunals a WhatsApp message, a text, a voice note or a photograph sent in a chat is a document like a letter or an email, and the same rules of disclosure and proof apply to it. The Employment Tribunal’s Presidential Guidance on general case management lists them in terms among the “relevant documents” a party must disclose: “notes of a significant meeting, such as a disciplinary interview; a resignation or dismissal letter; or material such as emails, text messages and social media content (Facebook, Twitter, Instagram, etc)”. The Employment Tribunal Procedure Rules 2024 give the tribunal the power behind that: under rule 33, “The Tribunal may order any person in Great Britain to disclose documents or information to a party (by providing copies or otherwise) or to allow a party to inspect such material as might be ordered by the county court”. “Any person” includes a witness or a former employee who is not a party.

Admissibility is rarely the issue; proof and weight are. The Civil Evidence Act 1995, section 8 says how a document is proved: “Where a statement contained in a document is admissible as evidence in civil proceedings, it may be proved (a) by the production of that document, or (b) whether or not that document is still in existence, by the production of a copy of that document or of the material part of it, authenticated in such manner as the court may approve”, and “It is immaterial for this purpose how many removes there are between a copy and the original.” A screenshot, an export, a print-out or a forensic image are all copies; each is admissible if authenticated to the court’s satisfaction, and the question in every contested case is what the authentication rests on.

Section 9 gives an organisation a route the individual does not have. “A document which is shown to form part of the records of a business or public authority may be received in evidence in civil proceedings without further proof”, on “a certificate to that effect signed by an officer of the business or authority to which the records belong”; “records” means “records in whatever form”, “business” includes “any activity regularly carried on over a period of time, whether for profit or not, by any body (whether corporate or not)”, which reaches a charity or a school, and “The absence of an entry in the records of a business or public authority may be proved in civil proceedings by affidavit of an officer”. The section only helps with messages that are part of the organisation’s records. A chat on a member of staff’s own phone is not, and that difference is the subject of the rest of this guide.

The duty to disclose, including the messages that hurt

Disclosure in the tribunal is described by the Presidential Guidance in plain words: “Disclosure is the process of showing the other party (or parties) all the documents you have which are relevant to the issues the Tribunal has to decide. Although it is a formal process, it is not a hostile process.” The scope is wide and the duty is two-sided: “Any relevant document in your possession (or which you have the power to obtain) which is or may be relevant to the issues must be disclosed. This includes documents which may harm your case as well as those which may help it. To conceal or withhold a relevant document is a serious matter.” Two phrases carry the weight for an organisation. “Which you have the power to obtain” reaches messages on a manager’s or a colleague’s phone that the organisation can ask for; and “may harm your case” means the group chat in which a manager was frank about the claimant is disclosable by the employer, not just discoverable by the claimant.

The guidance also expects the employer to lead: “In most cases, the respondent (usually the employer) has most or all of the relevant documents. This often makes it sensible for the respondent to take the lead in disclosure. Each party prepares a list of all relevant documents they hold and sends it as soon as possible to the other party.” Copies “should be ‘clean’ copies (that is, unmarked by later notes or comments, unless those notes or comments are themselves evidence)”, and the hearing bundle “should contain only the documents that are to be mentioned in witness statements or to be the subject of cross-examination at the hearing”. Privilege is narrow and named: notes made in preparing the case, correspondence with lawyers, “without prejudice” exchanges and “records of exchanges with ACAS”. A WhatsApp thread between two managers about how to handle a grievance is none of those.

The consequence for messages on personal phones is a duty the organisation owes and cannot discharge alone. Once a claim is contemplated, relevant messages must be preserved, which means telling the people who hold them; a message deleted after that point by a manager on a personal phone is a message the employer failed to preserve, whatever the manager’s reason. And the list of documents the employer sends must include the messages it knows exist on staff phones, or explain why it could not obtain them; a list that silently omits them is the concealment the guidance calls “a serious matter”.

Inspections, complaints and regulators

Outside the tribunal, messages become evidence in three other rooms, and each reads them for the same thing: what the organisation knew, when, and what it did. Ofsted’s operating guide for inspectors requires the lead inspector to “meet the designated safeguarding lead and review a sample of casework on day 1”; the chronology in that casework starts with the first message about the child, and the inspector asks how the concern first reached the lead. CQC’s Regulation 17 requires a care provider to keep “an accurate, complete and contemporaneous record in respect of each service user”, and Regulation 16 requires it to produce to CQC within 28 days of a request “a summary of complaints made under such complaints system, responses made by the registered person to such complaints and any further correspondence with the complainants”. A complaint first made by text to a care worker is a complaint; the text is the correspondence.

Then there is the subject access request, which is the route by which most organisations first discover what their staff have been saying. The ICO’s right of access guidance puts messages on personal devices within scope where staff hold them on the organisation’s behalf, and says the organisation “should ask them to search their private emails, devices or instant messaging applications, as appropriate”. A requester who is also a claimant, or the parent of a pupil in a safeguarding case, uses the two routes together: the SAR to find out what was said, the disclosure order to make the organisation produce it.

In none of these settings does the organisation get to decide that a message does not count because it was informal, or on a personal phone, or in an app the organisation did not sanction. The regulator’s question is whether the record shows the decision, and the message is where the decision was.

Screenshots, exports and what authenticity turns on

Section 8 makes every copy admissible in principle and leaves the court to approve the manner of authentication, so the practical question is what each kind of copy can be made to prove. The differences matter because a contested message is contested on exactly these points: is it complete, is it in order, when was it sent, who sent it, and has anything been removed.

• A screenshot shows what a screen displayed at the moment it was taken. It proves the appearance of a message, not its metadata; it usually omits the date unless the app happened to show it, cannot show what was deleted before it was taken, and can be edited with ordinary tools. It is the copy most often produced and the easiest to challenge, and its authentication rests on the evidence of the person who took it.
• An export from the app (a chat export, with or without media) carries every message in the thread with its timestamp and sender as the app recorded them, and shows where messages were deleted. It is far better evidence of sequence and timing, and its authentication rests on the person who made it and the device it came from; it can still be edited after export, which is why the original device matters.
• A forensic extraction of the device by a qualified examiner is the copy that can speak to deletions, edits and the state of the phone. It is expensive, intrusive, and available only where the device can be obtained, which for a personal phone means the owner’s consent or an order.
• A record held by the organisation, in a system the organisation runs, where messages were recorded as they were sent with their time and sender, is the copy section 9 was written for: part of “the records of a business”, receivable “without further proof” on an officer’s certificate, with the absence of a message provable in the same way.

Three things about digital evidence of this kind are worth knowing before the first copy is made. First, timestamps: an export records the date and time of each message as the sending device set them, and a thread whose date and time cannot be established is a thread whose sequence can be argued about; when the timing is the point, the export and the device settings are the evidence, not the screenshot. Second, deleted messages: a WhatsApp chat shows where a message was deleted but not what it said, an export preserves that gap, and a screenshot taken afterwards shows neither; a party who deleted messages after a dispute began will be asked why. Third, other people’s privacy: a WhatsApp conversation is rarely between two people about one subject, and disclosing the entire chat discloses personal data about everyone in it, so the usual practice is to disclose the relevant messages with the rest redacted and to say so, which is what data protection law and the tribunal both expect. The same principles govern electronic messages in family law and criminal proceedings, where most of the published advice is written; this guide is about the organisation’s side of civil and regulatory proceedings, and a solicitor should be involved the moment a message is likely to be relied upon in either.

Two habits decide most disputes before they start. The first is to preserve the original: the device, the account and the export, untouched, from the moment a message might matter, rather than a screenshot taken for convenience. The second is to record how each copy was made, by whom, from what device and when, because that is the authentication the court will be asked to approve, and a copy with no provenance is a copy with no weight.

The organisation that cannot produce them

Put the previous four sections together and the organisation’s position is this. It has a duty to disclose messages that may harm its case, including ones on staff phones it has the power to obtain. It is expected to lead the disclosure. A regulator will read the messages as its record. A requester can make it search for them. And the messages are on devices it cannot read, under a retention it does not set, held by people who may have left, in a form that proves least when it matters most.

The usual outcome is not a finding of concealment; it is worse for the organisation in a quieter way. The messages that survive are the ones the other side kept. The claimant has the screenshots of what the manager said; the manager changed phone. The parent has the thread with the teaching assistant; the school has the safeguarding entry typed up two days later. The family has the texts to the carer; the provider has a complaints log that starts a week after the first text. The organisation is then cross-examined on a record it never held, against copies it cannot check, and the absence of its own record is read as the absence of the action.

The fix is not to ban staff from messaging about work, which removes the organisation’s copy without removing the message. It is to give the work conversations a channel the organisation owns, so that the messages that will one day be evidence are recorded as they are sent, with their time and sender, in a system the organisation can export and certify, and the messages on personal phones are the private ones nothing lawful can reach. Two limits, stated plainly and including for products like ours: no channel can recover conversations that have already happened elsewhere, and no channel decides a case; it only means the organisation arrives with a record of its own.

A question for the next leadership meeting: take the last dispute, complaint or inspection. Which messages did the other side have that the organisation did not, and where were they?

Official guidance and your next step

The primary sources are the Civil Evidence Act 1995, sections 8 and 9; the Employment Tribunal Procedure Rules 2024, in force from 6 January 2025, including rule 33 on disclosure; the Presidential Guidance on general case management for employment tribunals in England and Wales, whose section on disclosure of documents and preparing hearing bundles is quoted throughout; the ICO’s right of access guidance; CQC’s guidance on Regulation 16 and Regulation 17; and Ofsted’s operating guide for inspectors for use from September 2026. The Civil Procedure Rules and their practice directions on disclosure govern the civil courts and are not covered here; Scotland has its own rules of evidence and tribunal practice.

This guide is a summary of legislation and published guidance for England and Wales, not a substitute for them and not legal advice. Whether a particular message is disclosable, privileged or admissible depends on the case; take advice before disclosing or withholding anything.

Then do one thing: pick the last significant decision about a member of staff or a person the organisation serves, and ask who holds the messages in which it was discussed, on what device, and whether the organisation could produce a clean, dated copy of them by Friday.