TI Messenger and WhatsApp Business: Compare more than encryption
TI Messenger provides a governed healthcare messaging framework. Approval does not replace endpoint management, recipient checks or documentation.
Revisión editorial:
El texto de este artículo está disponible en inglés en esta versión del sitio.
Contexto y fuentes
Gematik describes TI Messenger as an interoperable healthcare communication service based on Matrix. Approved offerings support communication across providers, with end-to-end encryption and governed identities as part of the security framework. [1]
Approval does not confer legal immunity. Confidential information still requires authorised disclosure. A verified identity does not prevent a sender selecting the wrong person. Necessary service providers must be involved under the conditions of section 203 of the German Criminal Code. [2]
Within its treatment-contract scope, section 630f BGB requires timely and traceable records. It does not require indiscriminate automatic archiving of every chat. Relevant treatment decisions need a defined route into the proper record. [3]
Alcance y límites
Neither a universal ban on every WhatsApp Business use nor unconditional approval based on encryption is justified here. Assess the precise service, purpose and data flows. TI features and actual partner connectivity also require checking.
Explicación sencilla
Fictional example: A nursing service and a doctor's practice agree to use an approved TI Messenger. A treatment change still needs clear attribution, confirmation and documentation in the responsible clinical record.
Recomendaciones prácticas
Our recommendation: Define recipients, information and response times before choosing a service. Verify approval for the specific TI offering and test communication with actual partners. Establish managed accounts, leaver procedures and lost-device handling.
Agree a fallback for urgent messages; delivery does not necessarily mean a clinician has acknowledged responsibility. Define which decisions enter the record and who transfers them. Train users to check recipients. A product name and encryption indicator cannot replace those workflows.