' That's what the traditional grammar says. However, 'who' is sometimes used in less formal writings. I consider it as substandard, so I'd advise you to avoid it.
New words, one handy idiom, and a 2-minute quiz — delivered to your inbox to keep your streak alive.