Overly on Security

About this Blog:

The legal side of security.

Michael Overly

Businesses May be Liable for Employee Statements on Social Networking Sites, says new FTC Guidelines.

|

New FTC guidelines (http://www.ftc.gov/os/2009/10/091005revisedendorsementguides.pdf) that went into effect on December 1, 2009, may impose liability on businesses for statements their employees make on social networking sites like Facebook, Twitter, LinkedIn, MySpace, personal blogs, and other sites – even if the company had no actual knowledge those statements were being made.  Specifically, if an employee makes comments about the business’ products and services and that employee fails to disclose their employment relationship with the business, the business may be subject to an enforcement action for deceptive endorsements.


The FTC guidelines state that where a connection exists between the speaker and the company selling the products and/or services and that connection would materially affect the weight or credibility of the speaker’s statements, the connection must be fully disclosed.  Although many examples are provided in the FTC guidelines, the following is of particular importance:



An online message board designated for discussions of new music download

technology is frequented by MP3 player enthusiasts. They exchange information about

new products, utilities, and the functionality of numerous playback devices. Unbeknownst

to the message board community, an employee of a leading playback device manufacturer

has been posting messages on the discussion board promoting the manufacturer’s product.

Knowledge of this poster’s employment likely would affect the weight or credibility of her endorsement. Therefore, the poster should clearly and conspicuously disclose her

relationship to the manufacturer to members and readers of the message board.



To reduce the potential for liability for these types of employee statements, businesses should adopt social networking policies that make clear only authorized spokesmen may speak on behalf of the company, that all other employees must avoid making any statements that could be viewed as official communications of the company or endorsements of its products and services, and that the employee must make clear their relationship with the company when making statements online.  For example, “I am an employee of XYZ Corporation.  These comments represents my own opinions and not those of my employer.  I am not a company spokesman.”  The company should also implement procedures to monitor compliance with its policies and the use of its name online.

Print
WHITE PAPER
Enter the Security KnowledgeVault

Dell The resources in this Security KnowledgeVault provide expert advice on everything from creating a multilayered security strategy and deploying a more proactive fight against cybercrime, to realizing when it's time to stop going it alone and seek outside, expert help.

» Learn More

WEBCAST
Protecting Your Data on Mobile Devices

Symantec Protecting data on mobile devices creates a whole new batch of security headaches. Join experts in this Videocast lead by John Girard, VP and Distinguished Analyst at Gartner, to hear how you can deploy a comprehensive enterprise encryption strategy.

» Learn More

Browse CSO Blogs

See all CSO Blogs »

Recent Comments

CSO Corporate Partners

RESOURCE CENTER