The use of WhatsApp in the workplace has become common, facilitating internal communication and information sharing between colleagues and departments. However, this practice also raises questions about corporate monitoring of conversations.
When a company device is involved, it is important to understand that conversations can be monitored, and that this practice is within the law. In this case, the company has the right to monitor both communications made on the company number and messages exchanged on devices provided to employees for business purposes.
Brazilian legislation allows the monitoring of WhatsApp on business devices, as long as employees are informed of this practice in a clear and transparent manner. It is important to note that the monitoring cannot extend to employees’ personal conversations, which are conducted on their own devices and during non-working hours. This practice would be considered an invasion of privacy.
Transparent monitoring
While the company has the right to monitor communications through corporate WhatsApp on its devices, it is important to be transparent about this policy and ensure that employees are aware of this monitoring from the moment it is implemented within the company.
Usage and Privacy Policies: Employees must be properly and formally informed that company devices may be monitored for security, compliance, and productivity purposes.
Consent: It is essential to obtain clear and informed consent from employees before initiating any type of monitoring of their devices. This includes being told what is being monitored, for what purpose and what specific data is being collected.
Purpose of Monitoring: Monitoring must be conducted solely for the purpose of ensuring network security and preventing the loss of confidential information, ensuring compliance with company policies, and maintaining productivity. Any form of non-work related monitoring may be considered inappropriate.
Privacy: Companies that collect and store employees’ personal information must comply with data privacy laws, such as the General Data Protection Law (LGPD), to ensure the security and integrity of employees’ personal information
Business security you can count on tuvis
Tuvis helps your organization identify potential security threats and prevent breaches and data loss. By looking at the context and intent behind communications in messaging apps, security teams can quickly detect and stop attacks and prevent potential incidents from escalating into larger problems.
To improve the security of business communications on WhatsApp, there are several strategies you can use with tuvis, such as restricting access to the application based on teams and roles, implementing secure login methods such as SSO (Single Sign-On), and using approved or virtual numbers to prevent unauthorized access. To learn more about how we can help you, click here to schedule a free demonstration.
