Your employer can restrict some of what you post — but not nearly as much as most social media policies imply. Federal and state laws generally limit what an employer can restrict in employees' social media use — most importantly through the National Labor Relations Act's protection of "concerted activity," which the NLRB applies to both unionized and non-unionized workers. The NLRB has issued extensive guidance on which social media policies cross the line: in its 2023 Stericycle decision, the Board narrowed the standard for evaluating these policies, generally requiring that the employer show its interest in a rule outweighs the burden the rule places on protected activity. The specifics depend on your situation, and these rules continue to change.
What can your employer restrict?
Employers are generally given room to restrict social media use that touches the business itself rather than the working conditions inside it. That usually covers the use of company confidential information, trade secrets and customer information; misrepresenting the company's products or services; using company logos or trademarks without authorization; posting from company devices during work time, within limits; defamatory or harassing statements aimed at particular co-workers; and disclosing personnel decisions or HR processes, again within limits. The pattern behind the list is that a rule tends to hold up when it protects something specific — a trade secret, a trademark, a named person — and tends to be treated as overbroad when it reaches general discussion of pay or conditions. How any of this lands depends on how the policy is written and how it is applied.
Employers are generally given room to restrict the following, though the specifics depend on how a policy is written and applied:
- Use of company confidential information, trade secrets, and customer information
- Misrepresentation of company products or services
- Use of company logos or trademarks without authorization
- Posting from company devices during work time (with limits)
- Defamatory or harassing statements about specific co-workers
- Disclosure of personnel decisions or HR processes (within limits)
What does federal law protect from employer restriction?
The National Labor Relations Act does most of the protecting here, through what the NLRB calls concerted activity. The Board generally treats discussion among employees about wages, hours, working conditions, scheduling, management decisions or unionization as protected, and that protection generally reaches every covered employee, unionized or not, in public posts as well as private ones. Truthful complaints about pay, schedule, management quality and the work environment are generally protected when raised as a shared concern. Reporting suspected illegal activity to a government agency is generally something an employer cannot prohibit, and agencies including the SEC, OSHA, the EEOC and the NLRB treat it that way. Filing an NLRB charge and organizing a union are generally protected outright. Off-duty political and social commentary is often protected by state law instead, with exceptions that vary — for example for statements that violate public policy. Your state may differ.
Under the National Labor Relations Act and related federal protections, the following are generally shielded from employer restriction. How they apply can vary with your situation:
- Concerted activity: The NLRB treats discussions among employees about wages, hours, working conditions, scheduling, management decisions, or unionization as protected. This protection generally extends to ALL employees, unionized or not, in private and public posts.
- Whistleblower communications: Agencies such as the SEC, OSHA, EEOC, and NLRB generally treat reporting suspected illegal activity to a government agency as something an employer cannot prohibit.
- Truthful complaints about working conditions: The NLRA generally protects employees who publicly discuss their pay, schedule, management quality, and work environment as a shared concern.
- Off-duty political and social commentary: Many state laws generally protect this from employer retaliation (with some exceptions, such as statements that violate public policy). Your state may differ.
- NLRB charge filing and union organizing: The NLRA generally bars employers from prohibiting these.
Which policy provisions are commonly overbroad?
The provisions the NLRB has treated as unlawfully overbroad tend to share one feature: they are worded so broadly that a reasonable employee could read them as banning protected discussion. Rules against damaging the company's reputation, against discussing internal company matters online, or requiring HR approval before posting about the company all sweep in conversations about pay and working conditions. So do rules that define confidential information to include salary, working conditions or personnel decisions, and blanket requirements to be respectful about managers online. Even where an employer only ever enforces such a rule against genuine misconduct, the NLRB has indicated that the existence of the rule can chill protected activity and support a charge. Whether a given rule crosses the line depends on its wording and the surrounding circumstances, and the Board narrowed the test it applies in its 2023 Stericycle decision.
The NLRB has, in various decisions, treated provisions like these as unlawfully overbroad:
- "Do not post anything that may damage the company's reputation"
- "Do not discuss internal company matters online"
- "Be respectful of co-workers and managers in all online communications"
- "Confidential information includes salary, working conditions, and personnel decisions"
- "Posts about the company must be approved by HR before publication"
- "Do not use company name or logo on personal accounts"
State law varies a great deal here, and these rules continue to change — your state may differ:
- California: California Labor Code § 96(k) is generally read to protect against adverse action based on lawful off-duty conduct, and multiple California statutes generally prohibit employers from demanding social media login or password access.
- New York: New York Labor Law § 201-d generally prohibits discrimination based on legal off-duty conduct.
- Many states: A number of states have statutes that generally prohibit requiring social media passwords from employees or applicants. It often helps to check your own state's law.
How do you navigate a social media policy, step by step?
Working out where a post sits generally means five things: read the policy, sort the post into a category, think about who it was made with, document the underlying concern internally, and keep personal accounts separate from company systems. The category matters most, because protection varies sharply by type — a discussion with co-workers about pay or schedule is generally protected by the NLRA, a whistleblower report to a regulator is strongly protected, a specific personal grievance about a manager is less protected and carries defamation risk, and disclosure of confidential business information is generally restrictable. Audience matters too, since the NLRB generally requires the activity to be concerted, taken with or on behalf of other employees. The Board treats a solo rant about a bad day as less protected than a discussion among co-workers about a shared issue. The specifics depend on the circumstances.
1. Many people start by reviewing the policy
A common first step is to pull your employer's social media policy and look for provisions that may be overbroad.
2. Many people identify what type of speech is at issue
It often helps to sort the post into a rough category, since protection generally varies by type:
- Personal opinion on a political issue → often protected, especially off-duty
- Discussion with co-workers about pay or schedule → generally NLRA-protected
- Complaint about a working condition → generally NLRA-protected if framed as a concerted concern
- Specific personal grievance about a manager → less protected; carries defamation risk
- Disclosure of confidential business information → generally restrictable
- Whistleblower report to a regulator → strongly protected
3. Knowing your audience often matters
For NLRA protection to apply, the NLRB generally requires the activity to be "concerted" — taken with or on behalf of other employees, or to bring group concerns to management's attention. The Board treats a solo rant about a bad day as less protected than a discussion among co-workers about a common issue. The specifics depend on the circumstances.
4. Documenting the underlying concern
When raising a working-condition issue publicly, many people also document it internally. Internal complaints can support the "concerted activity" framing and create a paper trail showing the employer was on notice.
5. Keeping personal accounts personal
Some people keep separate accounts for personal and work-related communications, and avoid using company email, company devices, or company hours for personal posts. This often reduces the basis an employer could point to for legitimate action.
What can you say to push back?
A social media policy usually gets tested at three points; these are the lines people use there: when a post is being treated as a discipline matter, when an employer asks for login credentials to a personal account, and when a group concern needs a written record behind it. None of them commits you to deleting anything, to handing over access, or to filing a charge — each one names the protection that already applies and asks the employer to say what it is relying on. The first cites Section 7 of the National Labor Relations Act, the second cites the state law on social media credentials, and the third simply records that a concern is shared. People generally fit the bracketed parts to their own post and their own state, and send the message in writing rather than raising it verbally. Versions some people adapt:
Pushing back on policy enforcement:
"I want to discuss the application of the social media policy to my [specific post]. The post addresses [specific working condition / pay / scheduling concern] and was made in coordination with co-workers who share the concern. This is protected concerted activity under Section 7 of the National Labor Relations Act. Could we discuss the basis for any potential adverse action?"
Responding to a request for social media credentials:
"Under [state law], employers cannot require employees or applicants to provide social media login credentials. I'd be happy to discuss any specific public posts that have raised concerns, but I cannot provide login access to my personal accounts."
Documenting a concerted-activity discussion:
"Following up on our group discussion about [working condition]. Several of us share the concern about [specific issue]. I have raised this internally with [manager / HR] on [dates], and we plan to continue discussing potential collective approaches to resolution."
What should you document?
What matters here is showing that the activity was shared rather than solitary, and that the employer knew about the underlying concern. So the file generally starts with the employer's social media policy as written, and the specific posts at issue, saved rather than described. Next to those, people note whether the activity was concerted — whether it involved other employees or spoke for them — because that is the question the NLRB generally asks first. Any internal complaint raising the same issue belongs in the file too, since it shows the employer was on notice before the post. The last two items are the employer's response, whether a warning, discipline or termination, and how close in time it came to the post. That closeness is often what a later reader looks at. What people commonly keep:
- The employer's social media policy
- The specific posts at issue
- Whether the activity was concerted (involved or addressed other employees)
- Any internal complaints raising the underlying issue
- The employer's response to the post (warning, discipline, termination)
- The temporal relationship between the post and any adverse action
When should you escalate?
Escalation generally comes up after an adverse action, and the route depends on what the post was about. Activity protected by the National Labor Relations Act usually goes to the NLRB, which generally applies a six-month limitation period to charges, so this is one of the places where waiting can cost the remedy. A post touching discrimination, harassment or retaliation themes may instead go to the EEOC. A whistleblower report generally goes to the agency it concerned, such as the SEC or OSHA. State-specific questions — off-duty conduct protections, social media password laws, a defamation defense — usually go to an employment attorney. NLRA protection for workers without a union is widely under-used, largely because many people do not know that it generally covers discussions of pay, working conditions and management even where there is no union at all. Whether a given post is protected depends on the situation.
If you face adverse action based on social media activity, common next steps people take include:
- Filing a charge with the National Labor Relations Board for NLRA-protected activity. The NLRB generally applies a 6-month statute of limitations to these charges.
- Filing an EEOC charge if the social media activity touched on discrimination, harassment, or retaliation themes.
- Consulting an employment attorney about state-specific protections (off-duty conduct, social media password laws, defamation defense).
- Filing with the SEC, OSHA, or another relevant agency if the activity was a whistleblower report.
NLRA protection for non-unionized workers is generally considered one of the most underused remedies in employment law. Many workers are not aware that the NLRA generally protects discussions of pay, working conditions, and management even without a union — though whether a given post is protected depends on the situation.
Official sources
- National Labor Relations Board — Concerted Activity (Section 7 rights)
- California Legislative Information — Labor Code § 96 (off-duty lawful conduct)
- New York State Senate — Labor Law § 201-d (legal off-duty activities)