Business of Medicine


Employee Social Media Misuse: Legal Constraints and Considerations

Executive Summary

As the use of social media continues to expand, healthcare organizations need to understand what they can and cannot control concerning employee social media usage to limit any potential risk. Healthcare providers who improperly manage their employee’s social media use could face a variety of legal issues. 

Recommended Actions
  • Ensure that your healthcare organization has a social media usage policy and that all employees understand it.
  • Monitor state and local laws regarding employer social media monitoring.
  • When on-boarding a new employee, explain your expectations for how employees should conduct themselves both during and outside of work.

There are many scenarios that may prompt an employer to discipline or terminate an employee for social media use. The most obvious situation is an employee who engages in illegal web-based activity while at work. Another common scenario is employee social media usage while at work.

Other situations may include employees posting negative comments or distasteful photos or videos, or calling in sick and then tweeting about being out and about. In the healthcare industry, an employee’s social media activity can be particularly troubling if, for example, they decide to post information about patients on social media.

Before deciding to take an adverse employment action against an employee based on social media use, employers should consider whether there are legal constraints preventing or limiting such action, as well as practical considerations. Some of the legal constraints and practical considerations employers must consider include:

Can an employer monitor an employee’s social media activity?

Technologies exist that permit the tracking of keystrokes on a keyboard, enabling an employer to discern an employee’s username and password to online accounts. Less technologically savvy employers might simply approach, pressure or otherwise obtain access from coworkers who may be connected to another employee on social media.

In the first scenario, the employer runs the risk of violating the Stored Communications Act (SCA), which generally prohibits accessing the online account of another without that individual’s consent. The second scenario can also raise SCA issues, as well as potential violations of common law privacy torts (e.g., intrusion upon one’s seclusion). And, of course, as noted above, employers asking employees for the passwords to their social media or online account generally is impermissible in many states.

Additional concerns arise if the employer permits employees to utilize their own personal devices for work activity. Typically called “bring your own device” (BYOD) programs, an employer’s ability or right to access information on the mobile device may be diminished when the device is owned by the employee.

Could the employee be protected under a whistleblower statute?

Federal and state whistleblower laws may protect employees who complain about certain company activities or conditions affecting public health and safety or violating public policy standards, as well as employees who report potential securities fraud violations.

Was the communication related to political activities or affiliations?

Many states prohibit employers from regulating employee political activities and affiliations or influencing employees’ political activities. Taking action against an employee for objectionable political speech could violate these restrictions.

Was the employee engaging in illegal activity or lawful off-duty activity protected by state law?
As discussed above, some states protect employees from adverse employment action on the basis of their engaging in lawful activities when not at work. Thus, in some states, an employer may be prohibited from terminating an employee who, for example, posts pictures of himself intoxicated at a party (assuming the employee is over 21 years old).

In contrast, the employer may have more leeway where the conduct is illegal. However, even where conduct appears to be illegal, the employer may still need to take additional steps to investigate and consult with counsel before taking any action. For example, in California, employers are prohibited from excluding someone from employment based solely on an arrest, marijuana convictions more than two years old, or convictions that have been expunged or dismissed. The law is far from clear in this area, and employers should consider each situation independently.

Does the employee have a potential discrimination claim?

As noted above, employers are prohibited from unlawfully discriminating against employees as well as applicants on account of protected characteristics, including race, age, sexual orientation, marital status, disability and genetic information. An employee’s manager may learn from an employee’s Facebook status, for example, that the employee is pregnant. In this case, the employer cannot fire the employee on account of the pregnancy or otherwise take adverse action against the employee.

Would the employer face wrongful termination claims?

An employer may also face wrongful termination claims for an allegedly improper termination decision in connection with social media use. For example, employers (including non-union employers) need to be mindful of the recent interpretations of the National Labor Relations Act (NLRA) concerning protected concerted activity rights related to social media policies and employee discipline pertaining to social media activity, which are discussed in detail below.

Does the employer make things worse by trying to make things better?

Consider discovering social media activity that addresses your workplace, refers to high level persons in your company and makes troubling allegations, but you cannot determine who is responsible for the posts or immediately confirm whether the allegations are true. Should you question employees potentially responsible or named in the posts or conduct forensic investigations? Maybe.

The decision will, of course, turn on the facts and circumstances, but one course of action that ought to be considered is doing nothing. Frequently, the person responsible for the social media activity is simply seeking attention, and if the person does not get it, he or she may just move on to another topic.

Ultimately, hiring, disciplining and firing are all critical parts of the employment relationship, and what is appropriate social media use in one workplace may not be in another. An employer relying on web-based information to make these decisions should be aware of potential legal repercussions and consult with legal counsel to manage the risks inherent in any adverse employment decision.

Labor Relations Considerations

The NLRA affords employees (even those who are not unionized) the right to engage in “concerted activity,” including the right to discuss the terms and conditions of their employment, and even to criticize their employers, with coworkers and outsiders. Not all concerted activities are protected by the NLRA; only those activities that are engaged in for the purpose of collective bargaining or other mutual aid or protection are covered.

What is concerted activity?

In general, concerted activity is activity “engaged in with or on the authority of other employees, and not solely by and on behalf of the employee himself.” Concerted activity also includes “circumstances where individual employees seek to initiate or to induce or to prepare for group action” and where individual employees bring “truly group complaints” to management’s attention. However, the Labor Board has held that individual employee gripes are not concerted activity.

When is concerted activity protected?

An employee’s concerted activity will be protected under Section 7 of the NLRA where, for example, the employee’s statements implicate the employee’s working conditions, regardless of how those statements are communicated. Another example of protected activity under Section 7 occurs when the employee protests supervisory actions. However, these protections can be lost where the employee’s outbursts about a supervisor are too “opprobrious” to maintain protection under Section 7. The use of curse words or expletives alone is unlikely to reach this level.

Protection also could be lost where the communication is disloyal or has the tendency to damage an employer’s business and are made with reckless disregard of the truth or are maliciously untrue. What exactly constitutes protected concerted activity requires further examination and analysis of the facts at issue on a case-by-case basis.

Decisions from the National Labor Relations Board (NLRB), the government agency charged with interpreting the NLRA, shed some light on what constitutes protected concerted activity in the social media context. In one decision, for example, the NLRB held that the employer acted unlawfully when it discharged two employees who made comments on Facebook about terms and conditions of employment, including the conduct of their supervisor, because such protests constituted protected concerted activity.
Whereas in another case, the NLRB ruled that an employee who communicates an “individual gripe rather than any shared concerns about working conditions” has not engaged in protected concerted activity.
The NLRB has also found certain policy language regarding employee social media use to be problematic, including the following:

  • Prohibiting posts discussing the employer’s non-public information, confidential information and legal matters (without further clarification of the meaning of these terms)
  • Prohibiting employees from harming the image and integrity of the company, making statements that are detrimental, disparaging or defamatory to the employer, and prohibiting employees from discussing workplace dissatisfaction
  • Prohibiting posts that are inaccurate or misleading or that contain offensive, demeaning or inappropriate remarks, and instructing employees to use a friendly tone and not engage in inflammatory discussions
  • Requiring employees to secure permission prior to posting photos, music, videos, quotes and personal information of others
  • Prohibiting the non-commercial use of the employer’s logos or trademarks
  • Discouraging employees from friending co-workers
  • Prohibiting online discussion with government agencies concerning the company
  • Encouraging employees to solve work problems in the workplace rather than posting about such problems online
  • Threatening employees with discipline or criminal prosecution for failing to report violations of an unlawful social media policy. 

On the other hand, the NLRB has found a social media policy that prevented “inappropriate postings that may include discriminatory remarks, harassment and threats of violence or similar inappropriate or unlawful conduct” to be lawful “since it prohibit[ed] plainly egregious conduct, such as discrimination and threats of violence.”

Additionally, the Acting General Counsel determined that an employer’s social media policy preventing the dissemination of trade secrets and confidential information was lawful where the policy provided numerous examples of what specifically should not be disseminated, such as system development information, processes and internal reports. By providing these examples, the Acting General Counsel found that employees would “understand that it does not reach protected communications about working conditions.” Employment decisions based on these types of social media activities, then, are likely to be deemed lawful.

Finally, your healthcare organization may consider implementing a cell phone usage policy, which specifically addresses employees using their cell phones while driving. Implementing such a policy can help keep employees informed while protecting your organization from some of the risks you face as a business. Your healthcare organization may consider using MagMutual’s template policy. Download this policy here.  

Lessons Learned 
  • Promote professionalism within your healthcare organization and encourage employees to voice any employment concerns to the appropriate supervisors or human resources department. 
  • Before implementing a workplace social media policy in your healthcare practice, consider policies other healthcare organizations are implementing to ensure that your policy aligns. 
  • If your healthcare organization is unsure about whether they can take disciplinary action against an employee for a specific social media incident, consult with counsel and get documentation of their advice before taking any action. 

Potential Damages

Healthcare organizations that improperly regulate their employee’s social media usage could face a variety of different issues from SCA violations, retaliation claims or NLRB investigations. Although relatively infrequent, the costs from these issues can quickly add up, especially if the employer has to face a lengthy and costly employment lawsuit. 


1. Healthcare organizations should be careful taking action against an employee for political activities or affiliations.
2. Healthcare organizations should be careful taking action against employees who complain about certain company activities or conditions affecting public health and safety.
3. Tracking keystrokes on a keyboard to enable an employer to discern an employee’s username and password to online accounts violates the Stored Communications Act.


Want to learn more?

Interested in how MagMutual can help?

View our products


The information provided in this resource does not constitute legal, medical or any other professional advice, nor does it establish a standard of care. This resource has been created as an aid to you in your practice. The ultimate decision on how to use the information provided rests solely with you, the PolicyOwner.