What is a social media policy?

Also called social media guidelines, employee social media policy.

A social media policy is a written set of rules for how a business and its staff use social media, both on the company's own accounts and when they mention the business on their personal accounts.

Why it matters

One careless post can share a customer's private details, promise something the business can't deliver, or start a public argument. A short policy tells everyone what is expected, protects customers' privacy, keeps account access under control, and gives you something clear to point to if a problem comes up.

Example

A hair salon's policy says: only the manager and two senior stylists post on the salon's accounts; always ask clients before photographing them and never show faces without a yes; don't reply to complaints publicly beyond a short apology and an invitation to message; and if you post about the salon on your own account, say you work there.

What to include in a social media policy

A small business policy can be one or two pages. Cover:

Who can post on the business accounts, and who approves posts.
Account security: each person uses their own login or the platform's role settings, with two-factor authentication on; no shared passwords.
Customer privacy: get consent before posting photos or details of customers, and never share personal information.
Confidential information: prices, plans or staff matters that must not be posted.
How to handle complaints and negative comments, and when to pass them to a manager.
Disclosure: staff who promote the business on their own accounts should say they work there.
Personal accounts: what is and isn't expected, written in line with local employment law.
What to do in a crisis, such as a post that goes wrong or a hacked account.

How to write one in an afternoon

Keep it practical. Write it as instructions, not legal language.

List everyone who has access to your business accounts, and remove anyone who shouldn't.
Write down who may post and who approves, in two sentences.
Add your rules for customer photos and personal details.
Write a three-step process for complaints: acknowledge, move to private messages, resolve or escalate.
Add a short section on staff posting about the business on their own accounts, including disclosure.
Add an emergency contact and steps for a hacked account or a post that needs taking down.
Share it with staff, ask them to read it, and review it once a year.

Disclosure and employees' rights

When staff praise or promote their employer online, they should make the connection clear. In the US, the Federal Trade Commission's guidance for endorsements lists an employment relationship as a connection that should be disclosed, alongside payment and free products.

Policies also shouldn't overreach. In the US, the National Labor Relations Board says employees' right to discuss pay and working conditions with each other can extend to social media, including in workplaces without a union. Rules differ by country, so check local employment law or take advice before restricting what staff say on their own accounts.

Social media policy vs brand guidelines

Brand guidelines describe how your posts should look and sound. A social media policy describes how people should behave: who posts, what is off-limits, and how to protect customers and the business. You need both once more than one person is involved, and both work best when they are short enough to actually read.

Common questions

Does a small business need a social media policy?

Yes, once anyone other than the owner posts on the business accounts or talks about the business online. Even a one-page policy prevents the most common problems with privacy, access and complaints.

Can I stop employees posting about work on their own accounts?

You can set reasonable rules, such as protecting confidential information and customer privacy, but blanket bans can conflict with employment law in some countries. Take local advice before restricting personal posts.