Free social media policy for employees templates for small business: NLRA-compliant with a savings clause, FTC disclosure, and state privacy notes. DOCX.
Six free social media policy templates for small business, built NLRA-compliant with a Section 7 savings clause, FTC disclosure, and state privacy notes: a basic one-page policy, a comprehensive version, remote, customer-facing, and healthcare versions, and an acknowledgment form. Download as DOCX.
A social media policy for employees sets clear expectations for how your team uses social media, both on their own accounts and on behalf of the company, so your confidential information and reputation stay protected. What most templates get wrong is the law: a policy that broadly tells employees not to post negatively about the company can actually violate federal labor law. Done right, the policy protects the business without crossing that line.
These six templates are built to do exactly that: a basic one-page version, a comprehensive policy, remote, customer-facing, and healthcare versions, and an acknowledgment form. Each is NLRA-compliant with a savings clause, FTC disclosure language, and a state-privacy note, and each downloads as a Word document, free and without an email. Because this policy sits alongside your other rules, it pairs naturally with your HR policy manual and employee handbook.
TL;DR
A social media policy for employees sets expectations for personal and work-related social media use, covering confidentiality, brand representation, disclosure, and conduct. The critical detail is legal: include an NLRA savings clause, since a 2023 ruling makes overbroad rules presumptively unlawful, plus FTC disclosure for endorsements and a state-privacy note. Download six free templates as DOCX, including remote, customer-facing, and healthcare versions, then have counsel review. This is general information, not legal advice.
What This Policy Is
A social media policy for employees is a written set of expectations for how employees use social media in ways that protect the company, respect customers and coworkers, and comply with the law. It covers personal accounts, official company accounts, and the gray area where a personal post identifies someone as your employee.
The document usually lives in the employee handbook and also works as a standalone policy signed at onboarding. It is distinct from marketing social media guidelines, which tell your marketing team how to run brand accounts; this policy is about employee conduct and the legal rules around it. This page provides the core policy and several role-specific versions together.
The Legal Rules That Shape It
Three legal rules shape every US employee social media policy, and they are exactly what generic templates tend to miss. Getting them right is what separates a policy that protects you from one that creates exposure.
The NLRA and protected activity
The single most important legal point is that the National Labor Relations Act protects employees, union or not, when they discuss wages, hours, and working conditions, including on social media. Under the 2023 Stericycle decision, a workplace rule is presumptively unlawful if it has a reasonable tendency to chill employees from exercising those rights, even if a non-coercive reading is also possible. That is why every template here includes a savings clause stating the policy does not restrict protected activity, and why you should use specific examples rather than broad bans like no negative posts about the company.
FTC endorsement disclosure
If your employees post about or endorse your products, the FTC Endorsement Guides (16 CFR Part 255) require them to clearly and conspicuously disclose that they work for you, because that relationship affects how consumers weigh the post. The FTC's own example makes this explicit for an employee promoting the employer's product, and notes that listing your employer on a profile page alone is not enough. The guidance also tells employers to train and monitor employees on this. Build a simple disclosure rule into the policy.
State social media privacy laws
A large and growing number of states restrict employers from requesting access to employees' personal social media accounts or passwords. Illinois (820 ILCS 55/10), Colorado, Arkansas, and Nevada are among them, and New York's law took effect in March 2024. Several prohibit even suggesting that an employee disclose a password. Your policy should state that you review only public content and do not request private-account access, and should be adaptable to the states where your employees work.
Monitoring, harassment, and confidentiality
Beyond those three, a strong policy connects to your other rules. Monitoring should be limited to publicly available, business-relevant content. Online harassment or discrimination directed at coworkers can violate your anti-harassment obligations, so the policy should reach conduct that affects the workplace. And confidentiality, trade-secret, and (in healthcare) HIPAA obligations all apply online exactly as they do offline.
Overbroad Rules Are Presumptively Unlawful
Under the NLRB's 2023 Stericycle decision, a workplace rule is presumptively unlawful if it has a reasonable tendency to chill employees from exercising their Section 7 rights, even if a non-coercive reading is also reasonable, and the standard applies to union and non-union employers alike. If your employees endorse your products, the FTC Endorsement Guides require them to disclose the employment relationship.
Because these rules apply to every employer regardless of size, and because they change, the safest approach is a policy built around them from the start, not a generic template with the compliance bolted on afterward, or left out.
What to Include
A complete policy moves from a foundation of purpose and protected rights, through the substance of confidentiality and representation, to enforcement. The sections below are the consensus set that a strong employee social media policy covers.
Foundation
Purpose and who it covers
Scope: personal and work accounts
A savings clause for protected rights
Protect
Confidentiality and trade secrets
Customer, patient, and coworker privacy
No harassment or discrimination online
Represent
Who may speak for the company
FTC disclosure for endorsements
A views-are-my-own disclaimer
Enforce
Monitoring limited to public content
Consequences for violations
A signed acknowledgment for the file
The parts most templates skip, and the ones that carry the legal weight, are the savings clause, the FTC-disclosure rule, and the state-privacy limit on monitoring. The templates on this page build all three in by default.
Why the Savings Clause Matters
The savings clause is the single most important line in a modern social media policy. It is a short statement that nothing in the policy restricts employees' legal right to discuss wages, hours, and working conditions, and it exists because of how federal labor law now treats workplace rules.
Specific Rules Beat Broad Bans
A savings clause helps, but it is not a cure-all: employment attorneys caution that a disclaimer alone may not save an overbroad rule. The stronger protection is to write specific, narrowly drawn provisions, for example do not share confidential financial data, rather than sweeping bans like do not post anything that could embarrass the company, which an employee could read to cover complaints about working conditions. Pair the savings clause with specific language, and have counsel review. This is general information, not legal advice.
In practice this means favoring concrete examples over broad prohibitions, keeping the savings clause prominent, and never disciplining an employee for protected activity even if a post is unflattering. The templates here are drafted with that balance in mind, and connect to your broader data protection and confidentiality rules.
Which Template Should You Use?
Start with the comprehensive policy, or the basic one-page version if you are early-stage, then add the role-specific version that fits your team. Use the remote version for a distributed team, the customer-facing version for sales and support, and the healthcare version wherever HIPAA applies.
Basic Policy
SMB, 1-page
A short, plain-language policy for a small or early-stage company: the essentials of respect, confidentiality, disclosure, and protected rights on a single page. Simple to adopt and grow from.
Comprehensive Policy
The flagship
The full policy: purpose, scope, protected rights, personal use, confidentiality, brand representation and FTC disclosure, non-harassment, monitoring and state law, consequences, and a sign-off. The version to adapt.
Remote / Hybrid Policy
Distributed teams
A version for remote and hybrid teams, built around home-office and screen-share posts where work and confidential information can slip into personal content.
Customer-Facing Policy
Sales & support
For employees who engage customers online: who may speak for the company, how to handle public replies and complaints, and when to move a conversation private.
Healthcare / HIPAA Policy
Patient privacy
For a healthcare setting, built around the rule that PHI never goes on social media, with photo, video, and background cautions the generic templates skip.
Acknowledgment Form
Ready to sign
A standalone form to record that each employee received and agreed to the social media policy, designed to be collected at onboarding and after updates.
Match the Template to Your Situation
Setting up a real policy: the Comprehensive version. Small and early-stage: the Basic one-page version. Remote or hybrid team: the Remote version. Sales, support, or community roles: the Customer-Facing version. A clinic, practice, or care facility: the Healthcare version. Then use the Acknowledgment Form, keep the savings clause and FTC language, add your state specifics, and have counsel review before adopting.
6 Free Social Media Policy Templates
Download all six as a single Word document or copy individual templates. The comprehensive policy is the core; the basic, remote, customer-facing, and healthcare versions handle specific situations; and the acknowledgment form captures the signature. Fill in your specifics, keep the compliance language, and have counsel review before you adopt.
Download All 6 Social Media Policy Templates
A basic one-page policy, a comprehensive version, remote, customer-facing, and healthcare versions, and an acknowledgment form. All in one DOCX.
Template 1: Basic Employee Social Media Policy (1-Page)
A short, plain-language version for a small or early-stage company: the essentials of respect, confidentiality, disclosure, and protected rights on a single page. Simple to adopt and grow from later.
Basic Employee Social Media Policy (1-Page)
EMPLOYEE SOCIAL MEDIA POLICY (BASIC)
[Company Name]
Effective date: _
A short, plain-language social media policy for a small or early-stage company.
Simple to adopt, easy to follow. Expand into the comprehensive version as you grow.
WHY WE HAVE THIS POLICY
Social media is part of everyday life, and how our team uses it can affect [Company
Name]'s reputation and the privacy of our customers and coworkers. This policy sets
simple, fair expectations for personal and work-related social media use.
THE BASICS
•Be respectful and professional when your posts could be connected to us.
•Do not share confidential company, customer, or coworker information.
•Make clear that your personal opinions are your own, not the company's.
•Follow the law and platform rules, including copyright.
•If you promote our products online, disclose that you work here.
WHAT THIS POLICY DOES NOT DO
Nothing in this policy limits your legal right to discuss your wages, hours, or
working conditions, or to talk with coworkers about work, on or off social media.
We respect those rights fully.
QUESTIONS AND CONCERNS
If you are unsure whether something is appropriate to post, ask [manager / HR
contact] before posting. If you see a post that misrepresents the company, report it
to [contact] rather than responding yourself.
ACKNOWLEDGMENT
I acknowledge that I have received and read this Employee Social Media Policy.
Employee signature: __ Date: _
DISCLAIMER: This is a sample template for general information only and is not legal
advice. Social media rules interact with federal labor law and state privacy laws.
Have this policy reviewed by a qualified employment attorney before adopting it.
Template 2: Comprehensive Employee Social Media Policy
The full policy: purpose, scope, protected rights, personal use, confidentiality, brand representation and FTC disclosure, non-harassment, monitoring and state law, consequences, and a sign-off. The foundation to adapt.
Comprehensive Employee Social Media Policy
EMPLOYEE SOCIAL MEDIA POLICY (COMPREHENSIVE)
[Company Name]
Effective date: _ Policy owner: __
Last reviewed: _
1. PURPOSE
This policy explains how employees, contractors, and interns should use social media
in ways that respect [Company Name], our customers, and our coworkers, and that
comply with applicable law. It applies to both company and personal accounts when
posts could reasonably be connected to the company.
2. SCOPE
This policy applies to all employees and covers all social media platforms, blogs,
forums, review sites, and messaging apps. It applies to both work-related and
personal use where content identifies you as an employee or relates to the company.
3. PROTECTED RIGHTS (READ FIRST)
Nothing in this policy is intended to, and it will not be applied to, restrict any
employee's rights under the National Labor Relations Act. Employees have the right to
discuss wages, hours, and terms and conditions of employment, and to engage in
protected concerted activity, on or off social media. Where any provision of this
policy could be read to limit that right, the protected right controls.
4. PERSONAL USE
•Personal social media on personal time is your own, within the limits below.
•Do not use company time or equipment for excessive personal posting.
•When your role or employer is identifiable, be professional and lawful.
•Add a simple disclaimer where useful: "Views are my own."
5. CONFIDENTIALITY AND PRIVACY
Do not share confidential or proprietary company information, trade secrets, or
non-public financials. Do not post customer, patient, or coworker personal
information without consent. Respect privacy and any applicable confidentiality
agreements.
6. REPRESENTING THE COMPANY AND FTC DISCLOSURE
Only authorized employees may speak for [Company Name] on official accounts. If you
post about or endorse our products or services, you must clearly and conspicuously
disclose that you work here, consistent with the FTC Endorsement Guides. A simple
"#[CompanyName]employee" or "I work for [Company Name]" satisfies this; listing your
employer on your profile alone is not enough.
7. RESPECT AND NON-HARASSMENT
Do not post harassing, discriminatory, threatening, or defamatory content directed
at coworkers, customers, or others in connection with your work. Our anti-harassment
and conduct policies apply to online conduct that affects the workplace.
8. MONITORING AND STATE PRIVACY LAW
[Company Name] may review publicly available social media content relevant to the
business. We do not request access to your private accounts or passwords. Many states
restrict employer access to personal social media accounts; we follow the law in
every state where our employees work.
9. CONSEQUENCES
Violations of this policy, other than protected activity, may result in disciplinary
action up to and including termination, consistent with law and our other policies.
10. QUESTIONS
Direct questions to [manager / HR contact]. When in doubt, ask before you post.
ACKNOWLEDGMENT
I acknowledge that I have received and read the [Company Name] Employee Social Media
Policy and understand my responsibilities under it.
Employee signature: __ Date: _
DISCLAIMER: This is a sample template for general informational purposes only and is
not legal advice, and not a guarantee of compliance. Social media policies interact
with the National Labor Relations Act, FTC rules, and state privacy laws, all of
which change. Have this policy reviewed by a qualified employment attorney before
adopting it.
Still Using Spreadsheets for Onboarding?
Automate documents, training assignments, task management, and track onboarding progress in real time.
Template 3: Remote / Hybrid Employee Social Media Policy
A version for remote and hybrid teams, built around home-office and screen-share posts where work and confidential information can slip into personal content.
Remote / Hybrid Employee Social Media Policy
REMOTE / HYBRID EMPLOYEE SOCIAL MEDIA POLICY
[Company Name]
Effective date: _
Use this version for a remote or hybrid team, where the line between work and
personal posting can blur and employees post from home about their work life.
1. PURPOSE
This policy sets expectations for social media use by remote and hybrid employees,
recognizing that home offices, video calls, and "day in the life" posts create new
ways for work and confidential information to appear online.
2. HOME-OFFICE AND WORKSPACE POSTS
•Before posting photos or videos of your workspace or screen, make sure no
confidential information, customer data, or coworker faces are visible.
•Do not share screenshots of internal tools, dashboards, or conversations.
•Be mindful of background details in video calls that you record or share.
3. PROTECTED RIGHTS
Nothing in this policy restricts your right under the National Labor Relations Act to
discuss wages, hours, and working conditions with coworkers, on or off social media.
Remote employees have the same protected rights as in-office employees.
4. CONFIDENTIALITY AND PROFESSIONALISM
•Do not share confidential or proprietary information in any post.
•Keep company and personal accounts separate where practical.
•When identifiable as an employee, be professional and add "Views are my own"
where useful.
•Disclose your employment if you post about or endorse company products.
5. QUESTIONS
If you are unsure whether a post is appropriate, ask [manager / HR contact] before
posting.
ACKNOWLEDGMENT
I acknowledge that I have received and read this Remote / Hybrid Employee Social
Media Policy.
Employee signature: __ Date: _
DISCLAIMER: This is a sample template for general information only and is not legal
advice. Have it reviewed by a qualified employment attorney before adopting it.
Template 4: Customer-Facing / Sales & Support Policy
For employees who engage customers online: who may speak for the company, how to handle public replies and complaints, and when to move a conversation private.
Customer-Facing / Sales & Support Social Media Policy
CUSTOMER-FACING SOCIAL MEDIA POLICY (SALES AND SUPPORT)
[Company Name]
Effective date: _
Use this version for employees who interact with customers online, including sales,
support, and social-media or community roles, where posts and replies represent the
company directly.
1. PURPOSE
This policy guides employees who engage customers on social media so that our brand
is represented consistently, professionally, and lawfully across every public reply
and post.
2. WHO MAY SPEAK FOR THE COMPANY
Only [authorized roles / the marketing or support team] may post from official
company accounts or respond to customers as the company. If you are not authorized
and a customer contacts you, route them to [official channel / contact].
3. RESPONDING TO CUSTOMERS
•Be professional, accurate, and helpful; never argue publicly.
•Do not share customer account details or personal information in public replies.
Move sensitive conversations to a private channel.
•Escalate complaints, legal threats, or press inquiries to [contact].
•Do not make promises about pricing, refunds, or features beyond your authority.
4. FTC DISCLOSURE AND ENDORSEMENTS
If you post about, review, or endorse company products on your personal accounts, you
must clearly and conspicuously disclose that you work here, consistent with the FTC
Endorsement Guides. Do not post fake reviews or ask others to.
5. PROTECTED RIGHTS AND CONFIDENTIALITY
Nothing here limits your right to discuss wages, hours, or working conditions under
the National Labor Relations Act. Separately, do not disclose confidential company or
customer information in any post.
ACKNOWLEDGMENT
I acknowledge that I have received and read this Customer-Facing Social Media Policy.
Employee signature: __ Date: _
DISCLAIMER: This is a sample template for general information only and is not legal
advice. Have it reviewed by a qualified employment attorney before adopting it.
Companies Using FirstHR Onboard 3x Faster
Join hundreds of small businesses who transformed their new hire experience.
Template 5: Healthcare / HIPAA Social Media Policy
For a healthcare setting, built around the rule that protected health information never goes on social media, with the photo, video, and background cautions the generic templates skip.
Healthcare / HIPAA Social Media Policy
HEALTHCARE SOCIAL MEDIA POLICY (HIPAA-AWARE)
[Company Name / Practice Name]
Effective date: _
Use this version for a healthcare setting, where social media use carries patient
privacy obligations under HIPAA on top of the usual concerns.
1. PURPOSE
This policy sets social media expectations for a healthcare workplace, where a single
post can breach patient privacy. It applies to all staff, including clinical and
administrative employees and contractors.
2. PROTECTED HEALTH INFORMATION (THE CENTRAL RULE)
Never post protected health information (PHI) on social media. This includes patient
names, images, room numbers, diagnoses, treatment details, or any information that
could identify a patient, even indirectly and even in a private group. Removing a
name is not enough if the patient could still be identified. There are no exceptions
for "positive" or "inspiring" stories.
3. PHOTOS AND VIDEO
•Do not photograph or record patients, patient areas, charts, or screens showing
PHI.
•Check backgrounds carefully before posting any workplace photo.
•Obtain proper written authorization before any patient appears in company content.
4. PROFESSIONALISM AND PROTECTED RIGHTS
Be professional and respectful in any post identifiable to the practice. Nothing in
this policy restricts your right under the National Labor Relations Act to discuss
wages, hours, or working conditions with coworkers.
5. CONSEQUENCES
A HIPAA violation on social media can result in disciplinary action up to and
including termination, and can carry legal and regulatory penalties for the
individual and the practice.
ACKNOWLEDGMENT
I acknowledge that I have received and read this Healthcare Social Media Policy and
understand my HIPAA obligations regarding social media.
Employee signature: __ Date: _
DISCLAIMER: This is a sample template for general information only and is not legal
advice, and not a guarantee of HIPAA compliance. Have this policy reviewed by a
qualified healthcare or employment attorney before adopting it.
Template 6: Social Media Policy Acknowledgment Form
A standalone form to record that each employee received and agreed to the social media policy, designed to be collected at onboarding and after material updates.
Social Media Policy Acknowledgment Form
SOCIAL MEDIA POLICY ACKNOWLEDGMENT FORM
[Company Name]
Use this form to record that an employee received and agreed to the social media
policy. Keep the signed form in the employee file, and collect it at onboarding and
after material updates.
EMPLOYEE ACKNOWLEDGMENT
I, __ (print name), acknowledge that:
•I have received a copy of the [Company Name] Employee Social Media Policy dated
_____.
•I have read and understand it, and I have had the opportunity to ask questions.
•I understand my responsibilities regarding confidentiality, professional conduct,
FTC disclosure, and protecting company and customer information online.
•I understand that this policy does not restrict my legal right to discuss wages,
hours, and working conditions.
•I agree to follow this policy as a condition of my employment.
DISCLAIMER: This is a sample form for general information only and is not legal
advice. Adapt it to your company and recordkeeping practices.
Social Media Policy for a Small Business
A large company has an HR and legal team to draft a social media policy and keep it compliant. A small business has an owner or an office manager who faces the same three legal rules with none of that support. Here is what matters most at that scale, and where the risk hides.
Most templates hand you a policy that could get you in trouble with federal labor law
The generic social media templates that rank tend to include broad bans, telling employees not to post anything negative about the company or not to discuss company matters online. Those exact phrasings are the ones federal labor law treats as a problem. Under the 2023 Stericycle standard, a rule is presumptively unlawful if an employee could reasonably read it to chill discussion of wages, hours, or working conditions, and the standard applies to every US employer, union or not. The templates here are written the other way: a clear savings clause protecting those rights, and specific, narrowly drawn expectations instead of sweeping prohibitions.
A small business collects the same legal exposure as a large one, without the HR to manage it
You do not need a marketing department or a union to be subject to the National Labor Relations Act, the FTC endorsement rules, and your state's social media privacy law. All three reach a five-person company the same as a large one, and the small business without a dedicated HR person is the least likely to know they apply. A single overbroad line, an undisclosed employee endorsement, or a request for an employee's account password can each create real exposure. These templates fold those three rules in plainly, so you get a compliant starting point without a compliance team.
A social media policy only protects you if it is signed, stored, and actually acknowledged
A policy you never distributed is hard to enforce and does little to protect you. The value comes from every employee receiving it, acknowledging it, and having that acknowledgment on file, which is exactly the kind of recordkeeping that slips on paper. This is where an HR platform helps honestly: FirstHR captures the policy acknowledgment with e-signature during onboarding, the same way it handles the employee handbook, stores the signed policy in the employee profile with document management, and tracks who has signed the current version. To be clear about scope, FirstHR is an onboarding and HR platform, not a law firm, and it does not run payroll or administer benefits, so pair it with counsel and those providers. The templates below work on their own; FirstHR is how you sign, store, and track them.
Adopt, Sign, and Apply
A social media policy delivers its value when it is adopted, acknowledged, and applied consistently. That means adapting the template, keeping the compliance language, collecting signed acknowledgments, briefing employees, and never disciplining protected activity.
Adapt the policy
Pick the version that fits, keep the savings clause and FTC-disclosure language, add your state specifics, and have counsel review.
Distribute and sign
Share the policy at onboarding and collect a signed acknowledgment with e-signature, the same flow as your handbook.
Train and apply
Brief employees on disclosure and confidentiality, apply the policy consistently, and never discipline protected activity.
Store and review
Keep the signed policy in the employee record and review it as the NLRA standard and state laws change.
The templates above work on their own. To adopt and apply them without paper, FirstHR captures the policy acknowledgment with e-signature during onboarding, the same flow it uses for the employee handbook, stores the signed policy in the employee profile with document management, and tracks who has acknowledged the current version. FirstHR is an onboarding and HR platform, not a law firm, and it does not run payroll or administer benefits, so connect those separately and consult employment counsel. Applicant tracking is coming soon to FirstHR.
Key Takeaways
A social media policy for employees sets expectations for personal and work-related social media use and protects the business.
Include an NLRA savings clause: after the 2023 Stericycle decision, overbroad rules that chill discussion of working conditions are presumptively unlawful.
Favor specific, narrowly drawn provisions over sweeping bans like no negative posts about the company.
Require FTC disclosure when employees endorse company products, and limit monitoring to public content per state privacy law.
Use the version that fits: basic, comprehensive, remote, customer-facing, or healthcare, and collect a signed acknowledgment.
These templates are US-first starting points, not certified compliance; have employment counsel review. This is general information, not legal advice.
Frequently Asked Questions
What is a social media policy for employees?
A social media policy for employees is a written company policy that sets expectations for how employees use social media, both on personal accounts and on behalf of the company, in ways that protect the business and respect the law. It typically covers personal use, confidentiality, representing the company, disclosure when endorsing products, non-harassment, monitoring, and consequences, and it ends with an employee acknowledgment. A well-drafted policy also includes a savings clause protecting employees' legal right to discuss wages, hours, and working conditions. It often lives in the employee handbook and is signed at onboarding. For a small business, a clear social media policy prevents confidential leaks and reputational harm while staying on the right side of federal labor law and state privacy rules. This is general information, not legal advice.
Can an employer restrict what employees post on social media?
Within limits, yes, but the limits matter. An employer can set reasonable, narrowly drawn rules protecting confidential information, trade secrets, customer privacy, and against harassment, and can require disclosure when employees endorse company products. What an employer cannot do is broadly ban employees from discussing their pay, hours, or working conditions, or from criticizing the company in ways tied to those conditions, because the National Labor Relations Act protects that activity for union and non-union employees alike. Under the 2023 Stericycle decision, an overbroad rule that could chill protected discussion is presumptively unlawful even if the employer did not intend it that way. The safe approach is specific rules plus a savings clause stating the policy does not restrict protected rights. This is general information, not legal advice.
What is an NLRA savings clause and do I need one?
A savings clause is a short statement, usually near the top of a social media policy, making clear that nothing in the policy restricts employees' rights under the National Labor Relations Act to discuss wages, hours, and working conditions or engage in protected concerted activity. You should include one. After the 2023 Stericycle decision, workplace rules that could reasonably be read to chill protected activity are presumptively unlawful, so a savings clause signals that your policy is not meant to reach protected conduct. It is not a cure-all: employment lawyers caution that a disclaimer alone may not save an otherwise overbroad rule, so pair it with specific, narrowly drawn provisions rather than sweeping bans. Every template on this page includes a savings clause. This is general information, not legal advice.
Do employees have to disclose that they work for the company when posting about it?
Yes, when they are endorsing or promoting the company's products or services. The FTC Endorsement Guides (16 CFR Part 255) require that a material connection, such as being an employee, be clearly and conspicuously disclosed when it would affect how consumers weigh the endorsement. The FTC's own example addresses an employee posting favorably about the employer's product and concludes the employment relationship should be disclosed, and it notes that simply listing your employer on a profile page is not enough. The FTC also tells employers to train and monitor employees on this. A simple, visible disclosure like stating you work for the company in the post satisfies it. Build a clear disclosure rule into your policy and brief employees on it. This is general information, not legal advice.
Can an employer ask for an employee's social media passwords?
In many states, no. A large and growing number of states have laws prohibiting employers from requesting access to employees' or applicants' personal social media accounts or passwords, and several bar an employer from even suggesting it. Illinois, Colorado, Arkansas, and Nevada are among these states, and New York's law took effect in March 2024. Penalties vary by state. Because the protections differ and the obligation follows where your employees work, the safest practice is to review only publicly available social media content relevant to the business and never request private-account access or passwords. State that limit clearly in your policy, and confirm the rule for each state where your employees are located. This is general information, not legal advice.
Should a social media policy be part of the handbook or a separate document?
It can be both, and many employers do both. The policy commonly lives as a section of the employee handbook so it sits alongside your other conduct and confidentiality rules, and it is also useful as a standalone document that new hires read and sign during onboarding. The standalone version makes it easy to collect a specific acknowledgment and to update the policy without reissuing the whole handbook, which matters because the underlying law changes. The practical approach is to keep the substance consistent between the two and collect a signed acknowledgment either way. The templates here work as standalone documents and slot directly into a handbook. This is general information, not legal advice.
Does a small business really need a social media policy?
Yes. The moment you have employees, three sets of rules apply regardless of your size: the National Labor Relations Act, which protects discussion of working conditions online; the FTC endorsement rules, if employees post about your products; and your state's social media privacy law. A small business without HR is the most likely to run afoul of them unintentionally, whether through an overbroad rule copied from a generic template, an undisclosed employee endorsement, or a request for an account password. A clear, compliant policy protects your confidential information and reputation while keeping you on the right side of those rules, and gives employees fair, predictable expectations. The key is a policy built for a small business, not a corporate marketing manual. This is general information, not legal advice.
What should a social media policy include?
A strong employee social media policy includes a purpose and scope, a savings clause protecting NLRA rights, personal-use guidelines, confidentiality and privacy rules, a section on who may represent the company and how employees must disclose endorsements under FTC rules, a non-harassment provision tying online conduct to your other policies, a monitoring section limited to public content that respects state privacy law, consequences for violations, and a signed acknowledgment. Industry-specific versions add more: a healthcare policy centers on never posting protected health information, a customer-facing policy covers who may reply to customers, and a remote policy addresses home-office and screen-share posts. Keep the language specific and narrowly drawn rather than sweeping, and have counsel review before adopting. This is general information, not legal advice.
