When WhatsApp goes down: continuity and incident reporting for brokers
A WhatsApp outage is a service failure for your brokerage. What FCA PS26/2, DORA and the Consumer Duty actually require, plus a continuity plan.
UK brokers are expected to evidence good outcomes under Consumer Duty. Here is how a shared WhatsApp inbox keeps client messaging compliant, recorded and fast.
For a UK broker, WhatsApp used to be a grey area: convenient for clients, awkward for compliance, and quietly tolerated as long as nobody asked. The FCA's Consumer Duty changed the terms of that tolerance. Firms now need to show that their communications support good outcomes and that they can evidence what was said to a client, when, and by whom. A client conversation that lives on an account executive's personal phone fails that test — not because WhatsApp is wrong, but because the firm cannot see it.
The Duty is built around four outcomes, and two of them bear directly on how a brokerage uses messaging:
Alongside the Duty sit the existing record-keeping rules in the FCA Handbook (ICOBS and SYSC), which require firms to keep adequate records of their dealings with clients. A shared inbox at firm level is the practical answer to both.
| Failure mode | What happens | Exposure |
|---|---|---|
| Staff turnover | The executive leaves; the client's entire history goes with the phone | No record for complaints, FOS referrals or audits |
| Single point of failure | The client messages at 08:30; the only person who sees it is off sick | Consumer-support outcome not met |
| Data protection | Client documents and personal data sit on an unmanaged device | UK GDPR accountability; ICO expectations on security |
None of these are theoretical. They surface the moment a complaint is escalated and the firm is asked to produce the conversation.
The brokerage runs one WhatsApp Business number (or one per office) on Meta's official platform. Every inbound message lands in a shared inbox. From there:
Templates for the recurring messages — renewal invitation, document request, mid-term adjustment confirmation — keep wording consistent and pre-approved, which is exactly what the consumer-understanding outcome rewards. On the client side nothing changes: they keep using WhatsApp as they always have.
A large share of inbound messages are simple: "Can you resend my certificate?", "What is my excess?", "When does my policy renew?". These can be drafted or answered automatically from the client record, with the handler reviewing before sending if the firm prefers. Anything that touches advice, cover adequacy or a claim should route to a person. The line is the firm's to draw, and it should be written down as part of the Consumer Duty governance — the same way IDD-regulated brokers across the EU document their distribution processes.
The practical steps for a brokerage of ten to sixty people are modest: choose the number (existing numbers can often be migrated), define the opt-in wording clients see, agree the retention period with the compliance function, write the five or six templates the team uses most, and run a two-week pilot with one team before rolling out. Research on messaging channels and customer satisfaction points to response time and consistency as the drivers clients notice — both of which a shared inbox improves immediately.
The FCA does not prohibit any particular channel. The firm must be able to meet its record-keeping, Consumer Duty and data-protection obligations on whatever channel it uses. A firm-controlled WhatsApp Business setup with retained records meets that bar; personal phones generally do not.
Follow the firm's existing retention policy for client communications, which is typically aligned with the relevant FCA record-keeping requirements and limitation periods. The key is that the policy is defined and applied consistently.
Yes. That is the point of a shared inbox: one client-facing number, many handlers, with each message attributed to the person who sent it.
For messages the firm initiates, yes — both as good practice under UK GDPR and PECR, and because WhatsApp's business platform requires it. Capture the opt-in at onboarding or renewal and keep the record.
Shared WhatsApp inbox, client records, follow-ups and opportunities for the whole brokerage. 15-minute demo.
A WhatsApp outage is a service failure for your brokerage. What FCA PS26/2, DORA and the Consumer Duty actually require, plus a continuity plan.
PRIN 2A.8 asks your board to sign off client outcomes yearly. What the FCA found thin, what CP26/23 would change, and where the evidence already sits.
A text thread hides the signals a phone call reveals. How brokers identify vulnerability on WhatsApp, record it lawfully and prove outcomes under FG21/1.