Privacy Lessons From the NHS Lanarkshire WhatsApp Incident

UK health service provider NHS Lanarkshire was reprimanded for sharing patients’ personal data through messaging app WhatsApp. Attorney Jonathan Armstrong emphasizes the risks of shadow IT and the importance of staff training. He suggests making conventional systems fit for purpose to hinder employees from resorting to shadow IT. This incident highlights how data protection laws, like the GDPR, apply to staff using messaging apps for work-related communication.