Your employer can restrict some of what you post — but not nearly as much as most social media policies imply. Federal and state laws generally limit what an employer can restrict in employees' social media use — most importantly through the National Labor Relations Act's protection of "concerted activity," which the NLRB applies to both unionized and non-unionized workers. The NLRB has issued extensive guidance on which social media policies cross the line: in its 2023 Stericycle decision, the Board narrowed the standard for evaluating these policies, generally requiring that the employer show its interest in a rule outweighs the burden the rule places on protected activity. The specifics depend on your situation, and these rules continue to change.
What can your employer restrict?
Employers are generally given room to restrict the following, though the specifics depend on how a policy is written and applied:
- Use of company confidential information, trade secrets, and customer information
- Misrepresentation of company products or services
- Use of company logos or trademarks without authorization
- Posting from company devices during work time (with limits)
- Defamatory or harassing statements about specific co-workers
- Disclosure of personnel decisions or HR processes (within limits)
What does federal law protect from employer restriction?
Under the National Labor Relations Act and related federal protections, the following are generally shielded from employer restriction. How they apply can vary with your situation:
- Concerted activity: The NLRB treats discussions among employees about wages, hours, working conditions, scheduling, management decisions, or unionization as protected. This protection generally extends to ALL employees, unionized or not, in private and public posts.
- Whistleblower communications: Agencies such as the SEC, OSHA, EEOC, and NLRB generally treat reporting suspected illegal activity to a government agency as something an employer cannot prohibit.
- Truthful complaints about working conditions: The NLRA generally protects employees who publicly discuss their pay, schedule, management quality, and work environment as a shared concern.
- Off-duty political and social commentary: Many state laws generally protect this from employer retaliation (with some exceptions, such as statements that violate public policy). Your state may differ.
- NLRB charge filing and union organizing: The NLRA generally bars employers from prohibiting these.
Which policy provisions are commonly overbroad?
The NLRB has, in various decisions, treated provisions like these as unlawfully overbroad:
- "Do not post anything that may damage the company's reputation"
- "Do not discuss internal company matters online"
- "Be respectful of co-workers and managers in all online communications"
- "Confidential information includes salary, working conditions, and personnel decisions"
- "Posts about the company must be approved by HR before publication"
- "Do not use company name or logo on personal accounts"
Each of these can be read to prohibit protected activity. Even where an employer enforces them only against genuine misconduct, the NLRB has indicated that the mere existence of such a rule can chill protected activity and support an NLRA charge — though whether a given rule crosses the line depends on its wording and the surrounding circumstances.
State law varies a great deal here, and these rules continue to change — your state may differ:
- California: California Labor Code § 96(k) is generally read to protect against adverse action based on lawful off-duty conduct, and multiple California statutes generally prohibit employers from demanding social media login or password access.
- New York: New York Labor Law § 201-d generally prohibits discrimination based on legal off-duty conduct.
- Many states: A number of states have statutes that generally prohibit requiring social media passwords from employees or applicants. It often helps to check your own state's law.
How do you navigate a social media policy, step by step?
1. Many people start by reviewing the policy
A common first step is to pull your employer's social media policy and look for provisions that may be overbroad.
2. Many people identify what type of speech is at issue
It often helps to sort the post into a rough category, since protection generally varies by type:
- Personal opinion on a political issue → often protected, especially off-duty
- Discussion with co-workers about pay or schedule → generally NLRA-protected
- Complaint about a working condition → generally NLRA-protected if framed as a concerted concern
- Specific personal grievance about a manager → less protected; carries defamation risk
- Disclosure of confidential business information → generally restrictable
- Whistleblower report to a regulator → strongly protected
3. Knowing your audience often matters
For NLRA protection to apply, the NLRB generally requires the activity to be "concerted" — taken with or on behalf of other employees, or to bring group concerns to management's attention. The Board treats a solo rant about a bad day as less protected than a discussion among co-workers about a common issue. The specifics depend on the circumstances.
4. Documenting the underlying concern
When raising a working-condition issue publicly, many people also document it internally. Internal complaints can support the "concerted activity" framing and create a paper trail showing the employer was on notice.
5. Keeping personal accounts personal
Some people keep separate accounts for personal and work-related communications, and avoid using company email, company devices, or company hours for personal posts. This often reduces the basis an employer could point to for legitimate action.
Scripts to use
Pushing back on policy enforcement:
"I want to discuss the application of the social media policy to my [specific post]. The post addresses [specific working condition / pay / scheduling concern] and was made in coordination with co-workers who share the concern. This is protected concerted activity under Section 7 of the National Labor Relations Act. Could we discuss the basis for any potential adverse action?"
Responding to a request for social media credentials:
"Under [state law], employers cannot require employees or applicants to provide social media login credentials. I'd be happy to discuss any specific public posts that have raised concerns, but I cannot provide login access to my personal accounts."
Documenting a concerted-activity discussion:
"Following up on our group discussion about [working condition]. Several of us share the concern about [specific issue]. I have raised this internally with [manager / HR] on [dates], and we plan to continue discussing potential collective approaches to resolution."
What should you document?
- The employer's social media policy
- The specific posts at issue
- Whether the activity was concerted (involved or addressed other employees)
- Any internal complaints raising the underlying issue
- The employer's response to the post (warning, discipline, termination)
- The temporal relationship between the post and any adverse action
When should you escalate?
If you face adverse action based on social media activity, common next steps people take include:
- Filing a charge with the National Labor Relations Board for NLRA-protected activity. The NLRB generally applies a 6-month statute of limitations to these charges.
- Filing an EEOC charge if the social media activity touched on discrimination, harassment, or retaliation themes.
- Consulting an employment attorney about state-specific protections (off-duty conduct, social media password laws, defamation defense).
- Filing with the SEC, OSHA, or another relevant agency if the activity was a whistleblower report.
NLRA protection for non-unionized workers is generally considered one of the most underused remedies in employment law. Many workers are not aware that the NLRA generally protects discussions of pay, working conditions, and management even without a union — though whether a given post is protected depends on the situation.
Official sources
- National Labor Relations Board — Concerted Activity (Section 7 rights)
- California Legislative Information — Labor Code § 96 (off-duty lawful conduct)
- New York State Senate — Labor Law § 201-d (legal off-duty activities)