Can You Stop Staff Posting About Work Online?

Can you stop staff posting about work online? Usually, yes - but only where the limits are lawful, reasonable and connected to your business.

That first answer is reassuring, but the details matter. You can't control every opinion an employee shares on their personal account. You can, however, set clear rules about confidential information, customer privacy, harassment, bullying, damage to your brand and posts that create real workplace issues.

The best approach is to be clear before anything goes wrong. A well-written social media policy, clear employee privacy rules, sensible employment contract clauses and a fair disciplinary process can help you protect your business without overreaching.

Can An Employer Stop Social Media Posts?

Yes, you can stop or restrict employee social media posts where the direction is lawful, reasonable and has a real connection to your business.

As an employer, you're generally allowed to give employees reasonable directions about their work and workplace conduct. That can include what they say online if the post affects your business, your customers, your staff, your confidential information or your reputation.

For example, you can usually tell staff not to:

• share confidential business information, pricing, supplier details or internal processes
• post photos or videos showing customers, children, patients or private areas without permission
• harass, bully or discriminate against colleagues online
• make misleading claims about your products or services
• pretend to speak on behalf of your business without approval
• post content that clearly damages the employment relationship

Where it gets tricky is personal, off-duty conduct. If an employee posts a private political opinion on their personal account, and it has no real link to your business, it may be risky to discipline them for it. On the other hand, if they identify themselves as working for your business and make offensive comments about customers, there may be a stronger connection.

The Fair Work Act 2009 is the main piece of legislation to keep in mind. It protects employees from unfair dismissal, adverse action for exercising workplace rights, and some discriminatory treatment. That means even when a post is frustrating or embarrassing, you still need a fair reason and a fair process before taking serious disciplinary action.

What Counts As Staff Posting About Work Online?

Staff posting about work online can include any post, comment, video, review, message or image that refers to your business, your workplace, your customers, your staff or your products.

It doesn't have to name your business directly. A post can still cause problems if people can work out who it's about from the employee's profile, uniform, location tags, hashtags or previous posts.

Common examples include:

• a TikTok filmed in your kitchen, warehouse, salon or office
• an Instagram story showing customer details, invoices, screens or rosters
• a Facebook post complaining about a manager, customer or co-worker
• a LinkedIn post sharing internal plans, sales data or product launches
• a group chat screenshot that later gets shared publicly
• a Google review or public comment about your business from a current employee

Say you run a cafe in Brisbane with 12 employees. A casual employee posts a funny video after closing time, but the background shows your POS screen with the day's takings and a customer's name. The caption also says, "We mess up orders all the time here." Even if the employee meant it as a joke, the post creates privacy, confidentiality and reputational issues.

In that scenario, you would usually have a stronger basis to ask for the post to be removed and speak to the employee about the breach. If your policy clearly says staff can't film in service areas or show customer information, your position is much stronger.

The practical test is this: can the post reasonably affect your business, your workplace or the trust you need in the role? If yes, it's worth dealing with carefully rather than ignoring it or reacting in the heat of the moment.

Do You Need An Employee Social Media Policy In Australia?

Yes, if your staff use social media and their posts could affect your business, you should have an employee social media policy in Australia.

A policy gives your team clear expectations before there's a problem. It also helps you show that an employee knew the rules if you later need to manage misconduct.

Your policy should be practical, not a long document nobody reads. The aim is to make it easy for staff to know what they can and can't do.

What Your Policy Should Cover

1. Purpose: explain that the policy protects customers, staff, confidential information and the business's reputation.
2. Who It Applies To: cover employees, casuals and contractors, and anyone with access to your workplace information.
3. Personal Accounts: explain when personal posts can still be a workplace issue, such as where the business is identifiable.
4. Confidential Information: list examples such as pricing, customer lists, financials, suppliers, passwords, internal systems and launch plans.
5. Photos And Videos: set rules for filming at work, using uniforms, showing customers and recording private areas.
6. Respectful Conduct: ban bullying, harassment, discrimination, threats and offensive comments connected to work.
7. Speaking For The Business: say who is allowed to post on official accounts, use AI tools for business posts or respond to customer complaints.
8. Customer Reviews And Comments: explain that staff shouldn't post fake reviews or misleading endorsements.
9. Reporting Concerns: tell staff who to contact if they see a risky post or are unsure about posting.
10. Consequences: explain that breaches may lead to counselling, warnings or disciplinary action, depending on the situation.

This outline is a starting point, not a finished legal document. A lawyer should tailor the policy to your industry, staff roles, customer privacy risks and how your business actually uses social media.

Once the policy is ready, don't just save it in a folder. Give it to staff, train them on it and keep a record that they received it. A policy is much easier to rely on if your employees actually knew about it.

Can You Put A Social Media Clause In An Employment Contract?

Yes, you can put a social media clause in an employment contract, and it's often a smart way to make your expectations contractually clear.

The clause doesn't need to repeat your entire policy. Instead, it should point to your workplace policies and set out the key obligations that matter most.

A social media clause can cover:

• following your social media policy and other reasonable workplace policies
• not disclosing confidential information during or after employment
• not posting content that could seriously damage your business or customer relationships
• not claiming to represent your business unless authorised
• returning or deleting business information at the end of employment
• allowing you to request removal of posts that breach the contract or policy

Confidentiality is especially important. If your employment contracts don't have clear confidentiality clauses, you may find it harder to act when someone shares customer lists, pricing, recipes, designs, source code, marketing plans or financial information online.

You should also think about the type of business you run. A childcare centre, allied health clinic or NDIS provider may need stricter privacy and photo rules than a retail store. A marketing agency may need clauses about who owns content created for client accounts. A software business may need tighter rules around code, product roadmaps and security information.

Be careful with clauses that go too far. A contract term that tries to stop every negative comment, every personal opinion or every after-hours post may be hard to enforce and could create employee relations problems.

For small businesses, contract templates can be tempting. They may miss details that matter for your workplace, such as who manages official accounts, how staff use their own devices and what happens when an employee leaves with account access. Tailoring the clause early can save a lot of stress later.

What Should You Do If A Staff Post Has Already Caused Damage?

Start by preserving evidence, assessing the risk and avoiding a rushed disciplinary decision.

When a damaging post appears online, it's normal to feel angry or blindsided. Still, a calm process will put your business in a much stronger position.

Step 1: Keep A Record

Take screenshots or screen recordings showing the post, date, time, username, comments, shares and any link to your business. If the post shows confidential information or customer details, keep a secure record and limit who can access it.

Step 2: Check Your Documents

Look at the employee's contract, your social media policy, confidentiality obligations, code of conduct and any previous warnings. Your response should line up with the rules you've actually given staff.

Step 3: Reduce Immediate Harm

If the post is still live, you can usually ask the employee to remove it, especially if it shows confidential information, customer data, private workplace areas or unauthorised branding. If an official business account is involved, change passwords and check access permissions.

Step 4: Speak To The Employee

Put the concern to the employee and give them a chance to respond. Ask what happened, who had access to the account, whether they understood the policy and whether the post was intended to be public.

Step 5: Choose A Proportionate Outcome

Depending on the seriousness, options may include coaching, retraining, a written warning, a final warning or, in serious cases, dismissal. The outcome should match the conduct, the employee's role, their history and the damage caused.

If personal information is involved, check whether your obligations under the Privacy Act 1988 apply. Some businesses may need to consider the Notifiable Data Breaches scheme if there has been unauthorised access to or disclosure of personal information that's likely to result in serious harm. Privacy obligations depend on your business size and sector, so get advice if customer information has been exposed.

When Can Social Media Misconduct Justify Disciplinary Action?

Social media misconduct can justify disciplinary action when there's a valid connection to work and your response is fair and proportionate.

In serious cases, it may even justify dismissal. But you should be careful. A dismissal that feels obvious from a business perspective can still be challenged if the process was unfair or the reason wasn't strong enough.

Under the Fair Work Act 2009, eligible employees generally have 21 days to lodge an unfair dismissal application after dismissal takes effect. Employees of businesses with 15 or more employees usually need at least 6 months' service to access unfair dismissal laws. Employees of small businesses with fewer than 15 employees usually need at least 12 months' service.

If you're a small business employer, the Small Business Fair Dismissal Code may be relevant. It doesn't mean you can skip process, but it can help guide how you deal with performance, conduct and serious misconduct.

A Worked Example

Mike runs a cleaning business in Adelaide with 18 employees. One full-time cleaner has worked for him for 2 years. The employee posts a video from a client's office at 11pm, showing security passes, computer screens and a caption mocking the client. The video gets 2,000 views before Mike finds it the next morning.

Mike takes screenshots, asks the employee to remove the video, tells the client he's investigating, and checks the employment contract and social media policy. The policy clearly bans filming at client sites and sharing client information.

Mike then invites the employee to a meeting, explains the concerns and gives them a chance to respond. The employee says they didn't think the screens were readable, but accepts they filmed at the client site. Mike considers the employee's role, the client confidentiality risk, the clear policy and the impact on the client relationship.

In that situation, serious disciplinary action may be available, potentially including dismissal. But if Mike dismissed the employee by text without giving them a chance to respond, he would increase the risk of an unfair dismissal claim, even though the post itself was serious.

Also keep the new right to disconnect in mind. Since 26 August 2024, many employees have had a workplace right to refuse unreasonable work contact outside hours. For small businesses, this started on 26 August 2025. This doesn't give staff a free pass to post damaging content after hours, but it does mean your expectations around monitoring, responding and engaging online outside work hours should be reasonable.

Common Mistakes To Avoid

The biggest mistake is reacting emotionally before you know the facts.

When your business is being criticised or exposed online, speed matters - but so does process. These are the common traps to avoid:

• No Policy: without a social media policy, it can be harder to show the employee knew what was expected.
• Overbroad Rules: banning all personal social media comments about work may be unrealistic and harder to justify.
• Ignoring Privacy: if a post shows customer, patient, client or child information, treat it as a privacy issue, not just a HR issue.
• Skipping Procedural Fairness: for serious discipline, give the employee enough detail about the concern and a genuine chance to respond.
• Uneven Treatment: if two employees do similar things but only one is disciplined, you may create avoidable risk.
• Forgetting Account Access: make sure business social media accounts aren't tied to one employee's personal email or phone number.
• Letting Old Contracts Sit: employment contracts written years ago may not deal with TikTok, LinkedIn, group chats, remote work or personal device use.

A practical checklist can help you stay steady:

1. Save evidence of the post and any business impact.
2. Check the contract, policy and past warnings.
3. Decide whether the post creates confidentiality, privacy, safety, bullying or reputational issues.
4. Ask for urgent removal if needed to reduce harm.
5. Meet with the employee and record their response.
6. Choose an outcome that matches the seriousness of the conduct.
7. Update your policy, training and account access controls if the incident exposes a gap.

This doesn't have to become complicated, but it should be deliberate. The clearer your expectations are from day one, the easier it's to deal with damaging posts fairly and confidently.

Key Takeaways

• You can usually restrict staff social media posts where the rule is lawful, reasonable and connected to your business.
• A clear employee social media policy is one of the best ways to prevent problems and support fair discipline if something goes wrong.
• Employment contracts should include tailored confidentiality and social media obligations, not just generic wording.
• If a damaging post appears, preserve evidence, reduce immediate harm, check your documents and give the employee a chance to respond.
• Serious online misconduct may justify dismissal, but process matters under the Fair Work Act 2009.
• Privacy, client confidentiality and account access should be treated as business protection issues, not just HR issues.

If you'd like help with your social media policy, employment contracts, confidentiality clauses or managing a staff conduct issue, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.