Social Media Policy
A Social Media Policy template that sets clear rules for employee personal and professional posting, protects confidential information, and preserves NLRA Section 7 rights to discuss working conditions.
Trusted by frontline teams 15 years of frontline software AI customization in seconds
Built for: Technology · Healthcare · Retail · Professional Services · Manufacturing
Overview
This Social Media Policy template sets rules for employee use of social platforms when they mention the company, coworkers, customers, products, or workplace issues. It is built to protect confidential information, brand reputation, and account security while preserving employee rights under NLRA Section 7 to discuss wages, schedules, safety, and other working conditions.
Use it when you need a written standard for personal posts, reposts, comments, direct messages, and official company accounts. It also helps when employees are asked to identify themselves as company staff online, when managers need a response path for harmful content, or when you want one policy that applies to marketing, recruiting, sales, support, and general employees. The template includes sections for purpose, scope, definitions, policy, procedure, roles, discipline, jurisdiction-specific notes, and review cadence so it can be adopted as a working HR document rather than a general statement.
Do not use it as a blanket speech restriction. If your draft bans all negative comments, all criticism of management, or all discussion of pay and conditions, it is too broad and may conflict with the NLRA. It also should not be used to police lawful off-duty conduct without a business reason, or to replace separate policies for harassment, privacy, records retention, or acceptable use. Add state-specific notes where needed, especially for California, New York, Illinois, and Washington, and align any monitoring or data collection with applicable privacy rules.
Standards & compliance context
- The policy should preserve NLRA Section 7 rights and avoid language that could be read to prohibit protected concerted activity about wages, hours, safety, or working conditions.
- Discipline and investigation language should be consistent with Title VII, ADA, ADEA, and EEOC guidance by focusing on harassment, discrimination, retaliation, and workplace conduct rather than protected status or viewpoint.
- If the policy addresses monitoring, data collection, or retention of social media content, align it with applicable privacy laws such as GDPR or CCPA where those rules apply.
- California employees: review any off-duty conduct language, privacy monitoring, and employee speech restrictions for state-law limits and ensure the policy does not overreach.
- New York employees: if the policy touches reporting or whistleblowing, coordinate with NY Labor Law Section 740 and any internal reporting protections.
- Washington and Illinois employees: confirm any sick leave, rest, or scheduling-related examples do not conflict with state-specific wage and hour or leave rules.
General regulatory context for orientation only — verify current requirements with counsel or the relevant agency before relying on this template for compliance.
What's inside this template
Purpose
Explains why the policy exists and what risks it is designed to control without restricting lawful employee speech.
-
This policy establishes expectations for employee use of social media to:
- Protect the company’s reputation, confidential information, intellectual property, and business relationships.
- Promote respectful, lawful, and professional online conduct.
- Clarify who may speak on behalf of the company and how official channels are managed.
- Preserve employees’ rights under NLRA Section 7 to engage in protected concerted activity, including discussing wages, hours, and working conditions.
This policy is intended to be applied consistently with applicable federal, state, and local law, including the National Labor Relations Act, Title VII of the Civil Rights Act of 1964, and the Fair Labor Standards Act (FLSA).
Scope
Defines which workers, devices, accounts, and online activity the policy applies to so there is no ambiguity.
-
This policy applies to all employees, contractors, temporary workers, interns, managers, and supervisors when they:
- Use social media during working time or using company resources.
- Post, share, comment, message, or otherwise communicate about the company, its employees, customers, vendors, or business.
- Manage or contribute to official company accounts.
- Identify themselves as affiliated with the company on a personal account.
This policy applies whether the content is created on or off duty, on company or personal devices, and whether the platform is public or private.
Definitions
Clarifies key terms like confidential information, official account, personal account, protected concerted activity, and social media.
-
For purposes of this policy:
- Social media includes public platforms, private groups, direct messages, blogs, forums, video-sharing sites, livestreams, review sites, and similar digital channels.
- Protected concerted activity means employees acting together, or on behalf of others, to discuss or address wages, hours, or working conditions.
- Confidential information includes non-public business, customer, employee, financial, operational, and trade secret information.
- Official company account means any account authorized to represent the company.
- Personal account means any account used in an individual capacity and not authorized to speak for the company.
- Reasonable accommodation requests related to disability, religion, or other protected needs must be handled through the company’s interactive process and should not be discussed publicly if doing so would disclose private medical or personnel information.
Policy Statement
States the core rules employees must follow when posting, commenting, sharing, or representing the company online.
-
Employees are expected to use good-faith judgment when engaging on social media. The company prohibits social media activity that:
- Discloses confidential information, trade secrets, non-public financial data, customer data, or employee personal information.
- Creates a false impression that the employee is authorized to speak for the company.
- Harasses, threatens, discriminates against, or retaliates against any person based on a protected characteristic under EEOC laws, including race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, or genetic information.
- Uses company logos, trademarks, copyrighted materials, or official branding without authorization.
- Interferes with job performance, workplace safety, or the company’s ability to meet business obligations.
- Violates law, court orders, contractual obligations, or other company policies.
The company will not discipline employees for lawful, protected speech, including protected concerted activity under NLRA Section 7, even if the content is critical of the company, provided the employee does not disclose confidential information or engage in unlawful conduct.
Procedure
Shows the step-by-step process for approvals, reporting concerns, investigations, and corrective action.
-
1. Personal Use
Employees may use personal social media accounts during non-working time, subject to this policy and other company policies. Employees should not use company time, equipment, or network resources for excessive personal posting.
2. Official Company Accounts
Only authorized employees may create, access, post to, or manage official company accounts. Authorized users must:
- Use approved branding and messaging.
- Follow the company’s content approval process.
- Protect login credentials and enable multi-factor authentication where available.
- Immediately report suspected account compromise, impersonation, or unauthorized access.
3. Speaking About the Company
Employees who identify their employment relationship online should make clear that views are their own and not the company’s, unless they are specifically authorized to speak on behalf of the company. Employees may not imply company endorsement without approval.
4. Confidentiality and Privacy
Employees must not post screenshots, internal messages, customer records, patient information, personnel matters, or other non-public information. If a post may include personal data, the employee must remove or mask the information before sharing.
5. Respectful Conduct and Anti-Harassment
Employees must not use social media to harass, bully, threaten, or discriminate against coworkers, customers, vendors, or applicants. Content that would violate the company’s anti-harassment or equal employment opportunity policies is prohibited.
6. Protected Speech and Escalation
If an employee believes a post, comment, or discussion involves wages, hours, safety, staffing, or other working conditions, the matter should be reviewed in good faith before any discipline is issued. Managers must consult HR or Legal before taking action that could affect protected concerted activity.
7. Crisis Response
Only designated spokespersons may respond publicly to incidents, emergencies, investigations, litigation, or media inquiries. Employees must route questions from journalists, customers, or regulators to the Communications or Legal team.
Roles & Responsibilities
Assigns ownership so employees know who approves content, who investigates issues, and who handles exceptions.
-
- Employees: Use social media responsibly, protect confidential information, and report suspected misuse, impersonation, or account compromise.
- Managers and supervisors: Model compliant conduct, avoid overbroad restrictions on protected speech, and escalate potential violations to HR.
- HR: Review complaints, coordinate investigations, and ensure discipline is consistent, documented, and compliant with NLRA, EEOC, and wage-hour requirements.
- Legal/Compliance: Review high-risk matters, including public incidents, defamation concerns, trade secret issues, and any matter involving protected concerted activity.
- Communications/Marketing: Manage official accounts, approve brand messaging, and maintain access controls and content standards.
- IT/Security: Support account security, access management, and incident response for compromised or impersonated accounts.
Compliance, Investigation, and Discipline
Explains how violations are reviewed, what evidence is preserved, and how documented warnings or PIPs are used when appropriate.
-
Violations of this policy may result in corrective action up to and including a documented warning, removal of content, suspension of access, a performance improvement plan (PIP), or termination, depending on the severity of the conduct and applicable law.
Before discipline is issued, the company will conduct a good-faith review of the facts, including whether the activity may be protected under NLRA Section 7 or otherwise protected by law. Discipline must be based on legitimate business reasons and applied consistently.
Where appropriate, the company may also require:
- Immediate deletion or correction of prohibited content.
- Retraining on confidentiality, harassment prevention, or brand standards.
- Revocation of access to official accounts.
- Referral to law enforcement or regulators if required by law.
Nothing in this policy is intended to restrict rights protected by law, including the right to discuss wages, hours, or working conditions, to report unlawful conduct, or to engage in other protected activity.
Jurisdiction-Specific Notes
Flags state-law carve-outs and local requirements that may change how the policy is applied in different locations.
-
California employees: This policy must be applied consistently with California labor, privacy, and wage-hour laws, including protections for lawful off-duty conduct where applicable and privacy limits on employee monitoring.
New York employees: Reports of retaliation or whistleblowing concerns should be handled consistently with applicable whistleblower protections, including NY Labor Law Section 740 where relevant.
Illinois employees: Scheduling, attendance, and rest-break related issues should be coordinated with applicable wage-hour and rest-period requirements, including the One Day Rest in Seven Act where applicable.
Washington employees: Paid sick leave and protected leave-related communications should be handled consistently with the Washington Paid Sick Leave law and related leave policies.
If a local law provides greater protection than this policy, the local law controls.
Review and Revision
Sets the effective_date, version control, and annual review cadence so the policy stays current.
-
This policy will be reviewed at least annually and updated as needed to reflect changes in law, platform practices, business operations, or enforcement guidance.
The policy holder is responsible for maintaining the current version, documenting revisions, and ensuring employees receive notice of material changes. Employees may be required to re-acknowledge the policy after significant updates.
How to use this template
- 1. Fill in the purpose, effective_date, version, applicable_jurisdictions, applicable_roles, and policy holder fields before publishing the policy.
- 2. Define what counts as confidential information, official company accounts, personal accounts used for work, and protected concerted activity so employees can tell the difference.
- 3. Assign ownership for approvals, monitoring, investigations, and communications escalation, and specify who can speak for the company online.
- 4. Add concrete examples of permitted and prohibited posts, including customer complaints, workplace discussions, brand mentions, and use of logos or trademarks.
- 5. Train managers and employees on reporting, review, and discipline steps, then route violations through your documented warning and PIP process when performance or conduct issues are correctable.
- 6. Review the policy annually and after major legal, platform, or organizational changes, then update jurisdiction-specific notes and acknowledgment language.
Best practices
- Write the policy around conduct and confidentiality, not around banning opinions or criticism.
- State that employees may discuss wages, schedules, safety, and working conditions to avoid chilling NLRA-protected activity.
- Separate rules for official company accounts from rules for personal accounts that mention the employer.
- Require approval before employees use company logos, trademarks, or customer testimonials in posts.
- Tell managers to escalate questionable posts to HR or Legal before taking action, especially when the post may involve protected activity.
- Use specific examples of harassment, threats, disclosure of trade secrets, and impersonation so the policy is easier to enforce consistently.
- Document how screenshots, links, and timestamps are preserved during investigations so evidence is reliable.
- Tie discipline to your standard warning and PIP framework so similar violations are handled the same way.
What this template typically catches
Issues teams running this template most often surface in practice:
Common use cases
Frequently asked questions
What does this Social Media Policy template actually cover?
It covers employee use of social platforms for both personal and work-related activity, including confidentiality, brand representation, use of company assets, and escalation when posts create risk. The template also includes guardrails for protected concerted activity under NLRA Section 7 so the policy does not overreach. It is designed to be customized for your approval process, reporting channels, and discipline standards.
Who should use and enforce this policy?
HR usually owns the policy, with Legal reviewing protected speech, privacy, and jurisdiction-specific issues, and managers applying it consistently. Communications or Marketing may need to approve official brand accounts, while IT may support access control and account security. The policy holder should be named so employees know who answers questions and who can authorize exceptions.
How often should this policy be reviewed?
Review it at least annually, and sooner when social platforms, labor law guidance, privacy rules, or company branding practices change. A yearly review helps catch outdated approval steps, missing account ownership rules, and language that could chill protected employee discussion. If you operate in multiple states, add a jurisdiction check at each revision.
How does this template address NLRA and other employment laws?
It is written to avoid banning employees from discussing wages, schedules, safety, or working conditions, which can be protected concerted activity under the NLRA. It also supports consistent enforcement under Title VII, ADA, ADEA, and anti-harassment rules by focusing on conduct, confidentiality, and harassment rather than viewpoint. If you collect social media data, add privacy and retention language aligned with applicable state law and GDPR or CCPA where relevant.
What are the most common mistakes in a social media policy?
The biggest mistake is using broad bans like 'do not post anything negative about the company,' which can conflict with employee rights. Other common issues are failing to define confidential information, not separating official company accounts from personal accounts, and skipping an investigation and discipline process. A weak policy also forgets to identify who approves posts and who can request takedowns or corrections.
Can this template be customized for different departments or roles?
Yes. You can add stricter rules for executives, recruiters, customer-facing teams, or employees who manage official accounts, while keeping the core employee rights language consistent. Many organizations also add role-based examples for sales, support, engineering, and field staff so the policy is easier to follow. The structure supports those add-ons without changing the core policy logic.
Should this policy connect to other HR or IT templates?
Yes, it works best alongside an acceptable use policy, confidentiality policy, code of conduct, harassment policy, and incident reporting procedure. If employees use company devices or accounts, link it to password, access, and data retention standards. For investigations, connect it to your documented warning and PIP process so discipline is consistent and traceable.
How do we roll this out without confusing employees?
Publish the policy with a short summary, examples of allowed and prohibited conduct, and a clear contact for questions. Train managers first so they can avoid overbroad enforcement and know when to escalate to HR or Legal. Then require acknowledgment from employees who use company systems, represent the company publicly, or manage official accounts.
Related templates
Go deeper on the topic
-
A standard operating procedure (SOP) is a documented, step-by-step procedure for a repeatable task — the written version of "how we do this here." Good SOPs...
-
An SOP (standard operating procedure) hub is the single, owned place where a company's step-by-step procedures live — how to handle a return, how to close a...
-
Onboarding is the 90-day stretch between "accepted offer" and "fully contributing team member." It is the single highest-leverage HR process in the company —...
-
Manager self-service (MSS) is the set of capabilities that give people managers direct access to HR actions and team data — approving time off, requesting...
-
AI employee self-service assistants cut HR and IT support time with instant answers, automated routing, and better employee experience.
-
Practical GenAI use cases for the workplace that boost efficiency, simplify adoption, and deliver quick value without complexity.
-
MangoApps 19.1 launches industry-first AI that creates intranet pages, forms, and trackers from a prompt in seconds.
-
Improve employee productivity with actionable strategies, modern collaboration tools, and a digital workplace that boosts efficiency.
Ready to use this template?
Get started with MangoApps and use Social Media Policy with your team — pricing built for small business.
