WhatsApp Safeguarding Rules for Sports Clubs

Short answer, and the whole of WhatsApp safeguarding for a sports club in one line: an adult coach should not be messaging an under-18 player one-to-one on personal WhatsApp, and if your club is doing it today you are outside the settled position of the UK football associations. The Football Association of Wales states it flatly: “It is inappropriate for adult coaches to communicate on a one-to-one basis with players under the age of 18 (this refers to emails, social networking sites, instant messaging and text messaging)” (FAW Safeguarding). Group messages, a copied parent or safeguarding officer, a club-managed channel. That is the shape of it.

What follows is the part most clubs get wrong. This is a governing-body rule, not French law. France’s contrôle d’honorabilité is a serious control — and it does not mention the channel at all. If you already know the rule and just need to pick a channel, the six criteria, the options and what each costs are further down.

The WhatsApp safeguarding rules a sports club is actually judged against

The table below sets out five entries from three organisations plus one French statute. The governing-body and regulator entries converge on the same operational conclusion from different directions. The statute — the only entry binding in France — is the one that says least about messaging.

Source	What it governs	What it requires of your channel	Binding on a French club?
FAW standing guidance	Adult–minor contact	No one-to-one messaging under 18; copy a parent/guardian or Club Safeguarding Officer; group over single messages; football business only	No — Wales governing body
FA Guidance Note 6.2, Oct 2020	Digital communication with children	Messages copied to parent/carer or Welfare Officer; participation decisions routed to parents; work with groups; sessions observable and interruptible	No — England governing body
FA Section 8, Parents and Carers	Parent entitlements	Parents should understand which communication methods the club uses; consent captured on a membership form (note 8.2)	No — England governing body
Irish DPC, Dec 2025	Personal data on personal devices	”Organisations should use official communication channels whenever possible and delete chats once they are no longer required for club purposes”	No — Irish regulator guidance, reasoning from the GDPR
Contrôle d’honorabilité, France	Who may hold the role	Nothing. No channel rule, no messaging rule, no parental-routing rule	Yes — and silent on this question

Read that last row twice. It is why nothing in the contrôle d’honorabilité stops a French club from being fully compliant and still having a coach run a private WhatsApp thread with a 14-year-old.

Should coaches text players on WhatsApp? The one-to-one line

Read across the two association texts, the recurring object of concern is not the device but the unobserved pair: copy a third party, group over single, observable and interruptible.

The FAW guidance requires adults to “copy to a third party. For example, a parent/guardian or the Club Safeguarding Officer”, to send “group messages rather than single messages”, and to keep content to “specific football-related matters, e.g. fixtures, team selection, cancellations. Do not respond to unrelated messages or engage in banter.” It sets a consent threshold under 16 — “Parental consent required for communication between an adult and young person (this could be sought at beginning of season)” — and a notification threshold under 18. It also tells clubs to consider “a club-only site, which would be managed and monitored by the club” rather than individual coach accounts.

The FA’s own operative text, guidance note 6.2, published in October 2020, requires that “Email and/or social media communications between the parties should copy in either the parent/carer or Welfare Officer, or both”, that “Where players are aged under 18, communications must go to parents/carers to accept or decline the player’s participation”, and that adults “Always work with groups” and keep online sessions “observable and interruptible”. One honest caveat: that note’s signed-consent bullet sits under a 16-and-17-year-old position-of-trust heading, not as a blanket all-ages rule, and the document itself says the guidance “is under review” in light of the ICO’s Age Appropriate Design Code of September 2020. Six years on, it is still the operative English text linked from The FA’s live Section 6 page (The FA), which frames the whole area simply: “our approach to safeguarding – and our responsibility to keep children safe – applies to the online environment as much as to the offline world.”

What the contrôle d’honorabilité does not do

France’s device is real and it has teeth. Under the Code du sport (articles L. 212-9 and L. 322-1) and décret n° 2021-379 du 31 mars 2021, federations transmit licensee identity data to the state, which checks each adult against bulletin n° 2 of the criminal record and the FIJAISV — the fichier judiciaire automatisé des auteurs d’infractions sexuelles ou violentes — at declaration and then annually on the anniversary of licence issuance (Ministère chargé des Sports). The loi du 8 mars 2024, the “Loi Abitbol”, reinforced it and wrote the annuality principle into the scheme (FFT, 2025). Legal commentary from March 2023, before that reinforcement, put the scheme’s reach at roughly 2 million individuals, in which only a court conviction bars anyone (Sport et Citoyenneté).

Now the finding that should decide your next committee meeting. The Fédération Française de Tennis published a ~11,500-word club implementation guide in February 2025 telling structures exactly how to run the check (FFT, 2025). A full-text search of it returns zero matches for “whatsapp” and zero for “réseaux sociaux”. The single “communi-” hit describes the FFT transmitting files to the ministry. The guide also confirms the limit of the device outright: “En l’état des dispositions actuelles du code du sport, ce contrôle ne s’applique pas aux sportifs ou à un autre public.”

So the vetting answers who the adult is. It is silent on how that adult may then talk to a child. That is an observed absence in the primary texts — not a legal permission, and not a legal prohibition. Personal WhatsApp sits precisely in it.

GDPR, not just safeguarding: the Irish DPC’s six conditions on a club WhatsApp group

Fair reckoning: safeguarding is not the only force here, and a club that frames this purely as a child-protection issue will under-build its policy. Row four of that table is the second force. Ireland’s Data Protection Commission reached the same destination in December 2025 from pure data-protection reasoning: “Personal devices used for club or organisational purposes may process personal data, bringing them within scope of the GDPR”, and “WhatsApp may be convenient, but it still involves processing personal data (such as name, messages, images, etc.). A club is responsible for ensuring its use complies with the GDPR.” Two motives, one channel decision.

The DPC sets six conditions on a club WhatsApp group: membership is consented, purpose is understood, no sensitive information is shared (“Never share sensitive information (e.g., medical details, vetting results, passports, etc.)”), invite links are switched off, content is reviewed and deleted, and people no longer involved are removed. It also expects a written BYOD and messaging policy, and trained coaches.

Choosing the channel: the criteria, the options, and the cost

Score any option against these six. Five of them come straight from the rules above; the sixth is a practical club concern rather than anything a rulebook requires.

1. Can a coach be prevented from starting a one-to-one thread with a minor?
2. Does every message reach the registered parent or guardian by default?
3. Can a safeguarding officer see the thread without joining it?
4. Is membership controlled by the club, with invite links off and leavers removed?
5. Is there retention and deletion control, so chats go when they are no longer needed?
6. Does the coach’s personal phone number stay private?

Criterion 3 is the one clubs cannot picture, so here it is concretely. In practice, this looks like: the safeguarding officer holds a read-only view of every club channel from their own login, and does not appear in the member list of any of them — so a coach cannot tell from the thread whether it is being read this week. And criterion 5, as an action rather than a setting: a calendar entry dated two weeks after the last fixture of the season, assigned to the channel admin, that exports the season’s messages to the club’s records and deletes the group.

Personal WhatsApp, coach to player. Cost: nothing. Exposure: everything. This is the configuration the guidance rules out.

A club-run WhatsApp group under the DPC’s six conditions. Free, familiar, and genuinely workable for fixture logistics — it passes 4 and partly 5 if someone is actually administering it. Check 1 and 3 against WhatsApp’s current settings before relying on the group. In practice, this looks like a season-long “U15 Fixtures” group, admin-only posting, invite link disabled, a written rule that any player question is answered in-group, and a diarised end-of-season deletion.

A general team-management app (products such as Spond and TeamSnap sit in this category). These solve the roster and availability problem well. Before adopting one, verify criteria 1, 3 and 5 against the product’s own documentation rather than assuming: direct messaging between adults and minors and safeguarding-officer visibility are the two criteria worth confirming explicitly.

A club-controlled communication platform with parent routing built in. A platform of this shape would pass all six only where the parent is the account holder and the coach never holds a private line to the child. Cost is real: a subscription, a migration weekend, and a season of nagging parents to install something.

None of the free options above passes all six. That is the actual trade-off in front of you.

The coach-parent communication policy your club can defend: five clauses

A coach-parent communication policy your club can defend has five clauses: named channel, no adult-to-minor one-to-one contact, all under-18 participation decisions to parents, a named safeguarding officer with visibility, and a cut-over date after which existing personal threads are closed. In practice, this looks like a one-page annex to the membership form, signed at registration each August, listing the single approved channel by name and stating that any message received on a coach’s personal number is redirected to it promptly.

That fifth clause is the one your coaches will ask about first, because most of them are carrying two seasons of history on a personal phone. In practice, this looks like: at the first coaches’ meeting, every coach sends one final message on any existing personal thread — “club messages now go through [channel] only” — then leaves the thread and deletes it from their device the same evening. The DPC’s own instruction to “delete chats once they are no longer required for club purposes” is what turns that from tidying into compliance.

If you want to see where your own school stands, our free family retention risk diagnostic gives you a benchmark in a few minutes.

Youth sports coach messaging rules only stick if you train them

Rules that are written once and filed do nothing; they have to be trained and re-stated. In practice, this looks like a 20-minute briefing at the pre-season coaches’ meeting, a laminated card in each coach’s kit bag listing the allowed message types — the FAW’s own examples are fixtures, team selection and cancellations — and a periodic audit by the safeguarding officer confirming no one-to-one threads exist.

The timing question

The direction of travel is settled: the associations and the Irish regulator converge on club communication with a minor running on a club-controlled channel, reaching the registered parent, and giving a safeguarding officer visibility without a coach’s personal phone in the loop. Platforms built for exactly this workflow exist — the parent as account holder, the club as channel owner, retention under club control. BeeNet is one such option, built for sports clubs with parent-routed channels and messaging; there are others, and the six criteria above are how you should judge all of them, BeeNet included.

France’s next annual honourability re-check will confirm, once again, exactly who your coaches are. It will tell you nothing about what they sent last Tuesday at 22:40. Registration season is when the annual registration form gets signed and the channel gets named — that is the window, and it is open now. If you want to see what parent-routed club messaging looks like in practice, book a demo.

References

1. Football Association of Wales. Communication — Safeguarding. Standing guidance, accessed 14 August 2026. https://faw.cymru/safeguarding/communication/
2. The Football Association. Section 6 — Safeguarding in the Digital World. Accessed 14 August 2026. https://www.thefa.com/football-rules-governance/safeguarding/section-6-safeguarding-in-the-digital-world
3. The Football Association. Guidance Notes No. 6.2 — Digital Communications and Children (Under 18s), Version 1.1, October 2020. https://www.thefa.com/-/media/thefacom-new/files/rules-and-regulations/safeguarding/section-6/6-2-digital-communications-with-children-colour-version.ashx
4. The Football Association. Section 8 — Parents and Carers. Accessed 14 August 2026. https://www.thefa.com/football-rules-governance/safeguarding/section-8-parents-and-carers
5. Ministère chargé des Sports (France). Contrôle d’honorabilité. Accessed 14 August 2026. https://www.sports.gouv.fr/controle-d-honorabilite-64
6. Fédération Française de Tennis. Guide pratique du contrôle de l’honorabilité des éducateurs sportifs bénévoles, des juges et arbitres et des exploitants licenciés de la FFT, February 2025. https://guidedudirigeant.fft.fr/wp-content/uploads/2025/02/Guide-daccompagnement-des-structures-federales-FFT-dans-la-mise-en-oeuvre-du-controle-dhonorabilite_2025.pdf
7. Data Protection Commission (Ireland). Own Devices and Your Data: What Clubs Need to Know, December 2025. https://www.dataprotection.ie/sites/default/files/uploads/2025-12/Sports-OwnDevicesandYourData.pdf
8. Sport et Citoyenneté. L’obligation d’honorabilité des éducateurs sportifs et son contrôle, 30 March 2023. https://www.sportetcitoyennete.com/articles/obligation-honorabilite-educateurs-sportifs-et-controle