IHK registration under §34d GewO, VVG advice and documentation duties, GDPR consent: what a German brokerage should settle before using WhatsApp.
Germany is a market where the professional habits and the private habits of clients point in opposite directions. In business, email still rules: quotes, endorsements and claims correspondence flow through inboxes and, in many firms, through fax-era workflows that survived digitisation. In private life, the same clients live on WhatsApp — surveys by the digital association Bitkom have for years placed it among the most used communication apps in the country, across all age groups. A Versicherungsmakler who wants to meet clients where they actually read messages therefore has to answer a compliance question first: under which rules, and with which records?
The good news is that no German rule forbids client communication over WhatsApp. The framework is the same one that governs every other channel — the trade licence regime of the Gewerbeordnung, the advice and documentation duties of the Versicherungsvertragsgesetz (VVG), and the GDPR with its German enforcement layer. This guide walks through each of them.
A common misunderstanding first. BaFin, the Federal Financial Supervisory Authority, supervises insurance undertakings. Insurance intermediaries — brokers (Versicherungsmakler) and agents (Versicherungsvertreter) — are licensed and supervised under §34d of the Gewerbeordnung (GewO), and the competent authority for the licence is the local Chamber of Industry and Commerce (IHK), not BaFin. The licence comes with entry in the public intermediary register, the Vermittlerregister maintained by DIHK, where every broker carries a registration number clients can look up.
Why does this matter for WhatsApp? Because the disclosure duties attached to the licence follow the broker onto every channel. The information a broker must give on first contact — status as a Makler, register number, how to verify it — does not disappear because the conversation happens in a chat. A short, standardised first-contact message that states who you are, your register number and a link to your Erstinformation page covers this cleanly, and a saved template means no colleague improvises it.
The Versicherungsvertragsgesetz is where German law becomes genuinely demanding for brokers. Three points shape how a brokerage should use WhatsApp — the official English translation of the Act is available at gesetze-im-internet.de:
The practical conclusion: WhatsApp is usable for advice-adjacent communication in Germany, but only in a setup where the firm can produce the conversation afterwards. Personal numbers fail that test; a brokerage-owned number with central archiving passes it.
Data protection enforcement in Germany is federal in structure. The BfDI supervises federal public bodies and telecoms; private companies — including brokerages — answer to the data protection authority of their Bundesland (for example the BayLDA in Bavaria or the LDI in North Rhine-Westphalia). German authorities are among the more active in Europe, and their published guidance on messenger services in customer communication is worth reading before rollout.
Two consent layers apply, and German practice treats them strictly:
Collect the WhatsApp opt-in explicitly — at onboarding, in the mandate documents or in a first email — record the date and wording, and separate service consent from marketing consent. The GDPR record-keeping you already do for email extends naturally to this.
| German habit | Consequence for WhatsApp |
|---|---|
| Premiums paid by SEPA direct debit (Lastschrift) | Fewer payment chasers than in debit-order markets; messages focus on mandate changes, returned debits and renewal premiums instead |
| Email remains the default business channel | Position WhatsApp as the fast lane for confirmations, documents and short questions — not a replacement for formal correspondence |
| Strong privacy culture | Expect clients to ask how their data is handled; a clear privacy notice covering WhatsApp builds trust rather than eroding it |
| Multi-line households (Hausrat, Haftpflicht, Kfz, BU) | One conversation thread per client across several policies argues for a shared, searchable inbox rather than per-line silos |
For a broader country view — market structure, regulator links and payment habits — see the Germany country profile.
ORIS runs on the WhatsApp Business API with a shared inbox, so every conversation is attributed to a handler and stored centrally — the retrievability the VVG documentation duty assumes. Opt-ins and opt-outs are recorded per client, outbound campaigns only ever use Meta-approved templates, and each campaign carries a service or marketing compliance tag, which maps cleanly onto the UWG distinction between servicing and advertising. When a chat needs to reach the client file or an external audit, conversations and customer data export to CSV.
No. BaFin supervises insurers, not intermediaries. A broker's obligations come from the §34d GewO licence regime supervised by the IHK, the VVG's advice and documentation duties, and data protection law — none of which prescribe or prohibit a specific channel.
The law does not ban it, but any recommendation made in a chat is still advice that must be documented with its reasons. Most firms keep formal advice in a structured document and use WhatsApp for the surrounding exchange — questions, documents, confirmations — with the chat archived as part of the record.
The UWG requires prior express consent for electronic advertising; double opt-in is not written into the statute but has become the standard way to prove consent after German court decisions on burden of proof. Treat it as strongly recommended practice.
The authority of the federal state where the firm is established — not the BfDI, which handles federal bodies and telecoms. Each Landesbehörde publishes its own guidance, and several have written specifically about messenger services in customer communication.
Adoption of the app is very high across age groups, but expectations differ from business email: clients expect short, useful, low-frequency messages. Firms that reserve WhatsApp for genuinely time-sensitive or convenient exchanges see it welcomed; firms that blast newsletters into it do not.
Shared WhatsApp inbox, client records, follow-ups and opportunities for the whole brokerage. 15-minute demo.
A marketing message sent to a segment of your book is a financial promotion. What ICOBS 2.2, the Consumer Duty and FG24/1 require inside a WhatsApp message.
PROD 4 makes your commission part of what the customer pays. What a small UK brokerage has to assess, review and be able to show — and where the proof sits.
How a UK brokerage archives client WhatsApp conversations under SYSC 9 and ICOBS, sets a retention policy, handles personal devices and exports evidence for the FOS.
