Image 1 of 1
Image 1 of 1
Image 1 of 1
Image 1 of 1
Social media is where most unintentional confidentiality breaches begin — and where employer brands are built or destroyed in minutes. This policy gives organizations a clear, proportionate framework for managing the risk without over-restricting legitimate activity.
Covers: Company account standards, personal account obligations (what employees must not do and best practice), the specific health tech context (regulatory and reputational risk of premature disclosure), a jurisdiction flag covering NLRA Section 7 concerted activity protections (US), the right to disconnect (IE), and the consequences of breach. Designed to work alongside the Confidentiality Policy.
FAQS
Q Does a social media policy restrict employees' freedom of speech?
A proportionate policy does not restrict lawful personal expression — it sets reasonable expectations about how Company confidential information, brand, and reputation are treated online. Employees retain full freedom to express personal views on matters unrelated to the Company. In the US, the NLRA Section 7 specifically protects employees' rights to discuss wages and working conditions online — the policy reflects this and does not attempt to prohibit concerted activity.
Q What should employees do if they see a concerning social media post about the Company?
Report it to the marketing function or HR immediately. The policy covers both proactive brand management and reactive issue handling — including data disclosure via social media, content that could constitute harassment of a colleague, and posts by employees that may breach the policy. Early reporting enables the organization to assess and respond before the situation escalates.
Q Does the policy cover AI-generated content posted on social media?
Yes. The general prohibition on disclosing Confidential Information applies to AI-generated content exactly as to human-authored content. An employee who prompts an AI tool with Company-specific information and posts the output on social media has breached both this policy and the Confidentiality Policy. The AI Usage Policy provides the full AI governance framework.
Q What are the consequences of a serious breach?
A serious breach — deliberate disclosure of unannounced product information, patient data, or commercially sensitive information — constitutes potential gross misconduct and can result in summary dismissal. In a health tech context, it may also engage regulatory notification obligations (FDA, MHRA, HSA) and create personal legal liability. The policy is explicit about these consequences.
Social media is where most unintentional confidentiality breaches begin — and where employer brands are built or destroyed in minutes. This policy gives organizations a clear, proportionate framework for managing the risk without over-restricting legitimate activity.
Covers: Company account standards, personal account obligations (what employees must not do and best practice), the specific health tech context (regulatory and reputational risk of premature disclosure), a jurisdiction flag covering NLRA Section 7 concerted activity protections (US), the right to disconnect (IE), and the consequences of breach. Designed to work alongside the Confidentiality Policy.
FAQS
Q Does a social media policy restrict employees' freedom of speech?
A proportionate policy does not restrict lawful personal expression — it sets reasonable expectations about how Company confidential information, brand, and reputation are treated online. Employees retain full freedom to express personal views on matters unrelated to the Company. In the US, the NLRA Section 7 specifically protects employees' rights to discuss wages and working conditions online — the policy reflects this and does not attempt to prohibit concerted activity.
Q What should employees do if they see a concerning social media post about the Company?
Report it to the marketing function or HR immediately. The policy covers both proactive brand management and reactive issue handling — including data disclosure via social media, content that could constitute harassment of a colleague, and posts by employees that may breach the policy. Early reporting enables the organization to assess and respond before the situation escalates.
Q Does the policy cover AI-generated content posted on social media?
Yes. The general prohibition on disclosing Confidential Information applies to AI-generated content exactly as to human-authored content. An employee who prompts an AI tool with Company-specific information and posts the output on social media has breached both this policy and the Confidentiality Policy. The AI Usage Policy provides the full AI governance framework.
Q What are the consequences of a serious breach?
A serious breach — deliberate disclosure of unannounced product information, patient data, or commercially sensitive information — constitutes potential gross misconduct and can result in summary dismissal. In a health tech context, it may also engage regulatory notification obligations (FDA, MHRA, HSA) and create personal legal liability. The policy is explicit about these consequences.
