Are employees obliged to give their personal phone to the company?

In modern people management, there is an axiom that many HR departments are rediscovering the hard way: "The data you don't have can't penalize you". For decades, the personal cell phone number has been a standard field in any employee file, almost as indisputable as the ID card or bank account number. However, in the 2026 legal framework, this identifier has been transformed from an operational asset into a high-risk legal liability.

The data minimization principle, enshrined in Article 5.1.c of the General Data Protection Regulation (GDPR), states that personal data must be "adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed." For an HR Director, the question today is not how to get the cell phone of your frontline workers, but why you are still storing it.

The phone number: The "Trojan horse" of legal non-compliance.

Technically, a company does not need an operator's personal phone number to execute his or her employment contract. It needs a communication channel, which is something quite different. Storing the private number in the company's ERP or HRIS opens the door to three critical risks:

• Unlawful processing: if HR uses that number to include the worker in a WhatsApp group or send him professional notifications without explicit, free and revocable consent, it is incurring in unlawful data processing.
• Vulnerability of consent: In 2026, Spanish case law is categorical: due to the relationship of subordination, it is very difficult to prove that a worker "freely" handed over his or her cell phone for work purposes.
• Data leaks and former employees: Maintaining a database with hundreds or thousands of personal numbers increases the attack surface for a cyber-incident. In addition, when an employee leaves the company, the trace of his or her number in chats and middle management agendas generates a liability that the company cannot technically control.

The right not to disclose private data: A growing dispute

One of the most contentious moments for HR managers in 2026 occurs when employees, increasingly aware of their rights, refuse to give out their personal number for business communications. This refusal is protected by law and cannot be subject to disciplinary action.

For companies with front-line staff (without corporate mail), this creates an "information blackout". If the employee does not give up his number and the company does not provide him with a terminal (because of the unaffordable cost of hardware), communication breaks down. This is where data minimization ceases to be a bureaucratic obligation and becomes a strategic opportunity through platforms such as Ommnio.

Privacy by Design: The Ommnio Technical Solution

Ommnio has been built under the pillar of "Privacy by Design", allowing HR to digitize 100% of its workforce without the need to know, process or store their personal phone numbers.

How is it possible to invite someone without their data?

Ommnio's system enables employee onboarding through non-intrusive methods:

• Unique QR codes: the employee scans a code at the workplace and registers in the app autonomously.
• Invitation relay: HR can generate invitations that are sent through internal systems or emails, without the mobile number ever reaching the hands of the platform administrator.

Once inside the application, the employee's phone number is hidden. Supervisors and colleagues can communicate with him, coordinate shifts or send documents, but no one in the organization has access to the private data. This eliminates the possibility of a manager calling or writing on personal channels outside the company's control.

Operational benefits of minimization

Adopting a "zero personal phone number" policy not only protects the company legally; it also improves efficiency:

Legal shielding before the AEPD

Penalties for misuse of personal terminals in 2026 are no longer isolated cases. Fines ranging from €70,000 to €80,000 have been imposed for actions as common as using personal phones for access codes or unsecured work groups.

By using Ommnio, the HR Manager can certify to any audit or inspection that the company strictly complies with the minimization principle. The company does not process the data (the phone number) because technically it does not need it for its communication platform to work. This shifts the burden of compliance to the technology infrastructure, freeing the HR team from constant vigilance over the digital behavior of its middle managers.

Less data, more control

In 2026, the digital maturity of an HR department is measured by its ability to protect the privacy of its workers without sacrificing operational agility. The personal cell phone number must return to what it should always have been: a citizen's private data, not a work tool.

Digitizing front-line workers with Ommnio enables organizations to be "immune" to the legal risks arising from hyper-connectivity and sensitive data management. It is time to simplify your database and professionalize your communication: gain in legal compliance by losing the fear of not knowing the number of your employees.