Question 1

What is a workplace social media policy?

Accepted Answer

A workplace social media policy is a formal document that governs how employees may use social media platforms in connection with their employment — encompassing both the employer's official social media accounts and employees' personal social media activity to the extent it intersects with their professional role. The policy addresses a wide spectrum of conduct: who is authorized to post on behalf of the company and the approval process for official content; expectations for employees who identify their employer on personal profiles; restrictions on sharing confidential business information, trade secrets, and client data through social channels; prohibitions on harassment, discrimination, and defamation through social platforms; the boundary between protected employee speech (including NLRA-protected concerted activity) and conduct that the employer may legitimately regulate; and brand reputation management including guidelines for responding to criticism and engaging with the public. Unlike most workplace policies that operate in a relatively stable legal environment, social media policies must navigate the ongoing tension between employer interests in controlling their public image and protecting confidential information, and employee rights to free expression, political speech, and organizing activity protected by the National Labor Relations Act.

Question 2

How does the NLRA protect employee social media activity?

Accepted Answer

The National Labor Relations Act (NLRA) provides the most significant legal constraint on employer social media policies. Section 7 of the NLRA protects employees' rights to engage in 'concerted activity' for the purpose of mutual aid or protection — and the National Labor Relations Board (NLRB) has consistently held that this protection extends to social media. Employees have a protected right to discuss wages, working conditions, management practices, and workplace safety on social media, even if the comments are critical of the employer. The NLRB has struck down numerous employer social media policies as overbroad because they would reasonably be interpreted by employees to restrict protected concerted activity. Specific provisions the NLRB has invalidated include: blanket prohibitions on 'negative' or 'disparaging' comments about the employer (employees must be free to criticize working conditions); requirements that employees not discuss 'confidential' information without defining what is confidential (wage information is never confidential under the NLRA); rules requiring employees to get prior approval before posting about the company; and policies stating that employees may not contact the media about workplace issues. However, the NLRA protection has limits: purely individual griping that does not seek to engage other employees is not protected; threats of violence, harassment, and comments that are so disloyal as to lose NLRA protection (Jefferson Standard test) can be disciplined; and supervisors are generally not protected by Section 7. The NLRA applies to virtually all private-sector employers regardless of whether the workforce is unionized.

Question 3

Can employers monitor employees' personal social media accounts?

Accepted Answer

Employer monitoring of employee personal social media raises significant legal and ethical issues. The legal landscape is a patchwork of federal and state restrictions. At the federal level, the Stored Communications Act (SCA) and Computer Fraud and Abuse Act (CFAA) prohibit unauthorized access to electronic communications and computer systems, which would include accessing an employee's social media account without permission. More than 30 states have enacted social media privacy laws that specifically prohibit employers from: requesting or requiring employees or applicants to provide social media login credentials; requiring employees to add the employer or a representative as a connection or friend; requiring employees to access their personal social media in the employer's presence; and retaliating against employees who refuse to provide social media access. These laws typically include exceptions allowing employers to investigate work-related misconduct and to access company-provided accounts and devices. Employers may generally monitor publicly available social media content — posts, comments, and profiles that are visible without logging in or sending a friend/follow request. However, acting on publicly available social media content still carries legal risk: discipline based on political posts may violate state laws protecting off-duty conduct or political activity (Colorado, California, New York, North Dakota, and other states have such protections), and adverse action based on social media content that reveals protected characteristics (religion, political beliefs, disability, pregnancy) can constitute discrimination.

Question 4

What confidentiality restrictions can the social media policy include?

Accepted Answer

The social media policy can and should restrict employees from sharing confidential business information on social media, but the confidentiality provisions must be carefully drafted to avoid NLRB scrutiny. Legitimate confidentiality restrictions include: trade secrets and proprietary business information (formulas, algorithms, customer lists, manufacturing processes); non-public financial information (revenue figures, profit margins, financial projections, pending transactions); client and customer confidential information (protected by NDAs, contractual obligations, or industry regulations like HIPAA or GLBA); litigation-related information subject to protective orders or attorney-client privilege; pre-announcement information about products, services, mergers, acquisitions, or partnerships; employee personal information (Social Security numbers, medical information, compensation details of others obtained through privileged access rather than employee-to-employee discussion); and intellectual property under development. The policy must NOT restrict employees from discussing their own wages, benefits, or working conditions — the NLRA protects this activity and the NLRB has consistently invalidated confidentiality provisions that employees could reasonably interpret as prohibiting wage discussions. The policy should specifically disclaim any restriction on NLRA-protected activity and provide examples of what is and is not considered confidential information to give employees clear, actionable guidance.

Question 5

How should the policy address employees who manage official company social media?

Accepted Answer

Employees authorized to manage the company's official social media presence occupy a unique position and need specific governance beyond the general social media policy. The policy should address: authorization and access management (who is authorized to post on behalf of the company, what approval process applies to content before publication, and how login credentials for company accounts are managed, stored, and rotated); brand voice and messaging guidelines (tone, style, approved topics, prohibited topics, crisis communication protocols); content approval workflows (which posts require pre-approval from management, legal, or PR versus which can be posted at the social media manager's discretion); response protocols (how to respond to customer complaints, negative reviews, media inquiries, and viral situations — including when to escalate rather than respond directly); compliance requirements for regulated industries (FTC disclosure requirements for sponsored content and influencer partnerships, SEC and FINRA social media rules for financial services, HIPAA for healthcare, FDA for pharmaceutical and medical device companies); and separation procedures (what happens to company social media accounts when the employee leaves — password changes, access revocation, transitioning follower relationships, and ownership of content created during employment). Account ownership should be clearly defined: company accounts belong to the company, and the policy should state this unambiguously to prevent disputes like those that have reached litigation in PhoneDog v. Kravitz and similar cases.

Question 6

What are the FTC disclosure requirements for social media?

Accepted Answer

The Federal Trade Commission requires that material connections between endorsers and advertisers be clearly and conspicuously disclosed in social media posts. This applies to employees who post about their employer's products or services on personal social media. Under the FTC's Endorsement Guides (16 CFR Part 255), if an employee posts a positive review or recommendation of their employer's product on social media, the employment relationship is a material connection that must be disclosed, even if the employee genuinely likes the product. The disclosure must be clear and conspicuous — not buried in hashtags, hidden behind a 'see more' link, or placed where viewers are unlikely to notice it. The FTC has indicated that hashtags like #ad, #sponsored, or #employee are acceptable when placed prominently at the beginning of a post, but ambiguous disclosures like #ambassador or #partner are insufficient. The social media policy should address FTC compliance by: requiring employees to disclose their employment relationship when posting about the company's products or services on personal accounts; providing specific disclosure language employees should use; clarifying that the employer does not control employees' personal social media but requires FTC-compliant disclosures when the content relates to the employer's products or services; and training employees who participate in brand ambassador or employee advocacy programs on their disclosure obligations. Failure to comply with FTC disclosure requirements can result in enforcement actions against both the employer and the individual employee.

Question 7

How should the policy address off-duty social media conduct?

Accepted Answer

Regulating off-duty social media conduct is one of the most legally complex areas of any social media policy because it pits employer interests against employee privacy rights and free expression. The legal framework varies significantly by state. Several states have 'lawful off-duty conduct' or 'lifestyle discrimination' statutes that restrict employers from taking adverse action based on employees' legal activities outside of work: California (Labor Code Sections 96(k) and 98.6) protects lawful conduct outside of work; Colorado protects lawful off-duty activities; New York protects recreational and political activities outside of work; North Dakota protects lawful off-duty activities; and similar statutes exist in other states. Separately, many states protect political activity and political speech outside of work, which would encompass political posts on social media. The NLRA protects concerted activity regardless of when it occurs. And anti-discrimination laws prohibit adverse action based on social media content that reveals protected characteristics (religion, disability, pregnancy, etc.). Given these constraints, the social media policy should: focus restrictions on conduct with a clear nexus to the workplace (posts that harass coworkers, disclose confidential information, or create a hostile work environment); avoid broad prohibitions on 'embarrassing' or 'damaging' off-duty posts that could be interpreted to restrict protected speech or off-duty conduct; address the specific conduct the employer can legitimately regulate (threats, harassment, discrimination, confidentiality breaches); and acknowledge employees' right to express personal opinions on their personal accounts while encouraging professionalism.

Question 8

What are the consequences for violating the social media policy?

Accepted Answer

The enforcement framework should be proportional, consistently applied, and carefully calibrated to avoid both under-enforcement (which renders the policy ineffective) and over-enforcement (which creates legal liability for restricting protected activity). Violations should be categorized by severity: minor violations (forgetting to include FTC disclosure on a product mention, posting during work hours in violation of personal social media use restrictions) typically warrant verbal coaching and retraining; moderate violations (posting confidential but non-sensitive information, engaging in unprofessional exchanges that reflect poorly on the employer without rising to the level of harassment) may warrant written warnings and mandatory social media training; serious violations (disclosing trade secrets or client confidential information, posting content that constitutes harassment of a coworker, making threats, sharing material subject to a litigation hold or protective order) should trigger immediate investigation, potential suspension pending investigation, and discipline up to termination. Before imposing discipline for any social media activity, the employer should: verify the identity of the poster (accounts can be spoofed or hacked); assess whether the activity is protected under the NLRA, state off-duty conduct laws, or anti-retaliation provisions; document the specific policy provision violated and the business impact; and consult with employment counsel for serious violations. Discipline must be applied consistently — taking action against one employee for critical social media posts while ignoring similar posts by other employees creates disparate treatment liability.

Component	Purpose	Key Details
NLRA Savings Clause	Preserves employee Section 7 rights	Explicit statement that nothing in the policy restricts NLRA-protected concerted activity
Personal vs. Official Use	Separates individual and company speech	Disclaimer requirements, authorized spokespersons, approval workflows for official accounts
Confidentiality Restrictions	Protects trade secrets and sensitive data	Specific categories of prohibited information, carve-out for wage/condition discussions
Conduct Standards	Prohibits harassment and discrimination online	Anti-harassment extends to social media, threats, discriminatory content, impersonation
FTC Disclosure	Ensures endorsement compliance	Employee disclosure of employment relationship, required language, brand ambassador rules
Enforcement Framework	Establishes proportional consequences	Severity tiers, investigation before discipline, NLRA compliance check, consistent application

Free Social Media Policy Forms

What Is a Workplace Social Media Policy?

NLRA Compliant

Confidentiality

Brand Protection

Social Media Policy Preview

Employee Social Media Policy

Key Components

How to Draft a Social Media Policy

Start with the NLRA Savings Clause and Legal Framework

Separate Personal and Official Social Media Governance

Draft Specific, Narrow Confidentiality Provisions

Address FTC Compliance and Industry Regulations

Build the Enforcement Framework and Train the Workforce

Frequently Asked Questions

Official Resources

Create Your Social Media Policy