How US employers can lawfully monitor employee social media under NLRB and EEOC rules

What to take away

What Section 7 protects when employees post about work

Section 7 of the National Labor Relations Act protects employees who act together for mutual aid or protection. Union membership is irrelevant, and the right applies in workplaces with no bargaining unit.

Section 8(a)(1) makes interference an unfair labor practice. A rule can be unlawful on its face even if nobody was disciplined under it, because how a reasonable employee reads it is what counts.

In Stericycle, Inc., 372 NLRB No. 113 (2023), the board replaced its Boeing test. A rule is presumptively unlawful if a dependent employee could reasonably read it as restricting Section 7 activity. The employer must then show a substantial interest with no less restrictive option.

Protected posts and the posts that lose protection

Profanity and a rude tone do not remove protection. Threats, harassment and disclosure of confidential business information usually fall outside Section 7.

A supervisor posts in a private group of eight coworkers that a new scheduling app keeps cutting hours without notice. Six reply, and two days later she is written up for breaking the social media policy.

That write-up looks unlawful, because the posts concern hours and the group is coworkers. A rule banning disparagement will not survive the same review. It is one of the six clauses that cause most workplace policy trouble, and a narrow redraft usually fixes it.

EEOC screening standards for social media checks

The EEOC does not ban screening. It treats the practice as a selection procedure, so the employer owns the result. Its guidance on selection procedures requires tests that are job related and consistent with business necessity.

Disparate treatment is intentional, as when a manager rejects a candidate over a religious post. Disparate impact is statistical, so a method that screens out a protected class at a higher rate needs proof of job relatedness.

Guardrails:

State off-duty conduct laws that add limits

Federal law sets a floor, and some states go further. California Labor Code sections 96(k) and 98.6 protect lawful conduct outside work. Illinois and New York also bar discipline for lawful off-duty activity.

Connecticut and Delaware require notice before electronic monitoring, so a policy can fail on that ground alone.

New York City and New York State both regulate screening in hiring. A New York City screening guide explains how city rules interact with state law.

FCRA duties when a vendor assembles the report

The FCRA applies when a third party assembles a consumer report for an employment decision. Most social media screening vendors fit, which makes them consumer reporting agencies. The FTC's guidance on using consumer reports for employment lists the core duties.

Bundling the disclosure with a liability waiver is a common error. The FTC's background check guidance covers the steps that follow an adverse finding.

Drafting steps for a lawful monitoring policy

A defensible policy states what is monitored, explains why, and ties discipline to conduct rather than speech. Policies fail in the same few ways, so the short list of those failures is worth reading before a redraft.

Clauses demanding respect "at all times," banning "disparaging" the company or keeping complaints "internal" fail the Stericycle test. A compliant clause reads: "Threats, harassment and disclosure of confidential customer data are prohibited."

What the discipline file should contain

Keep screening records at least one year, three years for payroll data, and longer while a charge is open. A look at what an investigation actually becomes is worth reading before you open one.

Common questions