Before You Connect AI to WhatsApp: the MDP 5D Method for Protecting Data and Clients
An AI assistant can answer in seconds, but before connecting it to WhatsApp a salon must know what data it sees, where that data goes and when the conversation must be handed to a person. The MDP 5D Method turns that review into five practical PASS/FAIL checks.
What is the MDP 5D Method?
The MDP 5D Method is an operational checklist for evaluating an AI assistant that reads or manages salon customer messages. The five Ds are Data minimisation, Disclosure, Destination, Human Decision and Duration. It is not a substitute for legal advice; it identifies weaknesses that must be corrected before activation.
Regulatory fact. The GDPR requires personal data to be adequate, relevant and limited to what is necessary. It also requires transparency and accountability. The EU AI Act introduces transparency duties for certain systems that interact directly with people. The exact duties depend on the actual configuration, providers and data flow.
MDP interpretation. The useful question is not “Is AI safe in general?” but “Does this specific configuration pass five verifiable checks?”
1. Data minimisation: does the AI see only what it needs?
For a booking, a name, contact detail, requested service, date and time are often enough. List every field available to the assistant. Photos, health notes, allergies, colour formulas, full history and internal comments should not become visible simply because they exist in the salon software.
The check is PASS when every accessible data point has a documented and necessary purpose. It is FAIL when the assistant receives complete customer profiles without an operational reason.
2. Disclosure: does the customer know who is replying?
The opening message should say that the response comes from an automated assistant, identify the salon responsible for it and provide an easy route to a person. Privacy information must be accessible without turning the chat into a wall of text.
PASS means the identity, the AI’s role and the human channel are clear. FAIL means the automation pretends to be a receptionist or makes the team difficult to reach.
3. Destination: do you know where the data travels and remains?
Map the provider, hosting, sub-processors, transfers outside the European Economic Area, any use of messages for training and the contractual terms. A generic marketing promise is not enough: service documentation and responsibilities must be clear.
Write the route in one line: customer → WhatsApp → AI platform → salon software, if any → storage. If one step is unknown, the check remains FAIL.
4. Human decision: when must the AI stop?
Automation can handle simple requests, but complaints, price disputes, allergy or chemical-treatment concerns, ambiguous requests and decisions with meaningful consequences must be handed to a person.
Define keywords, cases and a maximum takeover time. PASS requires a real escalation procedure, not merely a phone number.
5. Duration: when are messages and logs deleted?
Set separate retention periods for conversations, technical logs, backups and data moved into salon software. Define how access, correction and deletion requests are handled.
PASS means written time limits, named responsibilities and periodic deletion tests. FAIL means keeping data “as long as there is space”.
The MDP score: five gates, no averaging
| Check | Question | Result |
|---|---|---|
| Data minimisation | Does AI see only necessary data? | PASS/FAIL |
| Disclosure | Can the customer recognise the automation? | PASS/FAIL |
| Destination | Is the data flow known and documented? | PASS/FAIL |
| Human decision | Is there a real escalation? | PASS/FAIL |
| Duration | Are retention and deletion defined? | PASS/FAIL |
Give one point for each PASS. 5/5 allows a controlled pilot. At 4/5, correct the missing point first. At 3/5 or below, stop activation. The score measures operational readiness, not legal compliance.
A practical one-hour audit
- Draw the complete data flow.
- Open provider contracts, privacy policies and settings.
- Record every PASS/FAIL with evidence.
- Simulate a sensitive request and test human escalation.
- Assign a named person to review the system monthly.
Limits and primary sources
This method is an editorial and management tool, not legal advice. Verify roles, lawful bases, notices, contracts and security measures for the real configuration. Primary sources: Regulation (EU) 2016/679, Regulation (EU) 2024/1689 and the Italian Data Protection Authority’s AI resources.
FAQ
Can a salon use an AI chatbot on WhatsApp?
Yes, if the service is configured under the applicable rules, customers are informed, access is limited and adequate human control remains.
Can AI read the entire client record?
It should not receive everything automatically. Grant only the data required for the specific function and document the purpose.
Does 5/5 guarantee GDPR compliance?
No. It indicates operational readiness under the MDP 5D Method, but does not replace a legal and technical assessment.
MDP verdict
Do not connect AI to customer messages until all five gates are PASS. Speed matters only while the salon retains control, transparency and the ability to intervene.
