WhatsApp runs through UK medicine: departmental groups, on-call coordination, locum alerts, quick "what would you do?" questions between colleagues. The rules around it are less understood than the habit, so it is worth being precise. The short answer is that WhatsApp is fine for operational coordination and for generalised, educational questions, but it is risky, and often inappropriate, for patient-specific clinical advice that involves identifiable details. Here is what the GMC actually requires, where the line sits, and what to do instead when a question is really about a specific patient.
Key takeaways
- WhatsApp is acceptable for operational coordination and generalised, educational clinical questions.
- It is risky for patient-specific advice, because the sum of shared details can identify a patient.
- The GMC requires explicit consent to share identifiable patient information, in any online setting.
- A private group is not a secure space, and anonymisation is rarely as complete as people think.
- For patient-specific clinical questions, use governed routes such as Advice and Guidance, not a group chat.
What the GMC actually says
Start with the source, because most of the confusion comes from not reading it. The GMC's guidance on using social media as a medical professional states that you must not disclose identifiable information about patients without explicit consent, and it makes a crucial point that people routinely miss: although individual pieces of information may not breach confidentiality on their own, the sum of information shared can be enough for a patient, or someone close to them, to be identified. The GMC also makes clear, in its wider guidance, that a private group is not automatically a secure place for confidential information, particularly where you do not control membership, and that anonymisation is rarely as safe as assumed. The standards do not change because you are typing into a phone rather than speaking in a corridor.
The distinction that matters: coordination versus clinical advice
The single most useful thing to hold onto is the difference between two kinds of message. Operational coordination, arranging cover, flagging that a patient needs review, saying you are running late, coordinating a handover in general terms, is a normal, sensible use of messaging, and does not require sharing identifiable clinical detail. Patient-specific clinical advice, asking colleagues to help manage a named or identifiable patient, is a different thing entirely, because to be useful it usually requires exactly the details that create confidentiality and governance risk. The first is fine. The second needs a governed, documented route. When you feel the message starting to include the specifics that would identify someone, that is the signal to move off WhatsApp.
The combined-details trap
This is where careful doctors still slip. It feels safe to leave out the name, but confidentiality is not protected by omitting one identifier. Consider a message: a 34-year-old woman, recently returned from a specific country, with a rare presentation, seen at a named small hospital, this week, with a photo. No name appears, yet the combination is more than enough to identify her, especially to anyone in that setting. The GMC's warning about the sum of details is precisely about this. The more unusual the case, the fewer details it takes to identify the patient, which is the opposite of what intuition suggests, because unusual cases are the ones people most want to share.
What you must not post
A simple list keeps you safe. Do not post patient names, dates of birth, NHS numbers, or addresses. Do not post photographs of patients, clinical areas, or documents. Do not post rare or distinctive case details in combination, even without a name. Do not post anything that, added to what is already in the thread, would let someone identify the patient. And do not treat "it is a private group" as permission, because membership changes, screenshots travel, and phone backups persist.
What to do instead
The good news is that better routes exist for the questions WhatsApp handles badly. For a specialist's view on a specific patient, use NHS e-Referral Advice and Guidance, or governed services such as Consultant Connect and Cinapsis, which provide messaging, calls and photo advice through pathways designed for patient data, with the interaction documented. For urgent clinical concerns, use your normal escalation route and senior review. For guideline questions, use an authoritative source rather than a crowd. And for anything where you are genuinely unsure about the professional or medico-legal position, your defence organisation will advise. The common thread is that patient-specific clinical decisions belong in accountable, documented channels, not ephemeral chats.
A note on encryption and NHS systems
It is worth being clear that end-to-end encryption, which WhatsApp has, is not the same as clinical governance. Encryption protects a message in transit, but it does not make WhatsApp an approved system for holding patient records, does not create an auditable clinical record, and does not override your trust's information governance policies, which you must follow. Local policies vary, and some organisations restrict clinical use of consumer messaging apps entirely, so check what applies where you work rather than assuming.
Where iatroX fits
For the clinical-question part of what people currently use WhatsApp for, a source-grounded tool is often the better first stop. Instead of asking a group "what is the first-line for X", Ask iatroX gives a guideline-grounded answer with the source attached, so you get an accountable, checkable response without any confidentiality risk, and you can then confirm the local pathway where it matters. iatroX does not replace specialist advice or senior review for genuinely patient-specific decisions; it handles the generalisable clinical questions safely and leaves the patient-specific ones to governed routes. You can try it with free sample questions at iatroX. For the wider picture of how doctors use online channels, see how doctors find help online.
Frequently asked questions
Is it illegal for doctors to use WhatsApp for clinical communication? Not inherently. It is widely used for operational coordination. The issue is confidentiality and governance: sharing identifiable patient information without consent breaches GMC standards, and local information-governance policies apply. Use it for coordination and generalised questions, not patient-specific advice.
Can I ask about a patient in a WhatsApp group if I remove the name? Not safely. Removing the name does not protect confidentiality, because the sum of remaining details can still identify the patient, especially in unusual cases. Use a governed, documented route for patient-specific questions.
Is a private WhatsApp group confidential? No, not in the way people assume. The GMC notes that private groups are not secure spaces, membership and screenshots are outside your control, and messages persist in backups. Do not rely on privacy settings for confidentiality.
What should I use instead of WhatsApp for specialist advice? Governed routes such as NHS e-Referral Advice and Guidance, and services like Consultant Connect or Cinapsis, which are designed for patient data and document the interaction. For urgent concerns, use normal escalation and senior review.
Does end-to-end encryption make WhatsApp safe for patient data? No. Encryption protects messages in transit but does not make WhatsApp an approved clinical system, does not create an auditable record, and does not override your trust's information-governance policies, which still apply.