Their Account, Your Problem: Personal Social Media Meets ER

A manager walks into your office holding a phone. Someone on the team has an account the manager was never meant to see, and now the manager wants to know what HR is going to do about it.

Most teams reach for the social media use policy at that point. The harder question sits one step earlier. It is whether the account is the company’s business at all, and whether your answer would be the same if a different employee had posted the same thing.

On September 23, Rebecca Taylor of AllVoices put that question to Daniel Space, HR instructor, author, and speaker at The HRBPs. Space spent nearly 20 years as an HR business partner at companies including American Express, Electronic Arts, and Spotify before moving into consulting, and now teaches HR business partners on Maven. The session grew out of a LinkedIn post Space wrote about seven employees whose OnlyFans accounts were discovered at work.

Rebecca opened with a poll asking whether an employee’s personal social media had ever landed on an attendee’s desk. In the live poll, 83% said yes. For most of the room, the manager with the phone was a memory, not a hypothetical.

Why does the same off-duty content get one employee fired and another a warning?

Because the outcome tends to follow who posted it and who is judging it, not what was posted. Space had the cases to show it.

Since moving into consulting, Space has handled seven cases at seven different companies in which an employee’s explicit OnlyFans content was found by someone at work. Each employee was an individual contributor in a corporate role with three to five years of experience. None of the accounts conflicted with the job. In every case the discovery became office knowledge, and in two it turned into bullying.

Six of the seven were guided through a process, offered resources, and cautioned. One was terminated for violating policy and failing to fit the organization’s morals. Space asked the chat to guess what set that case apart. Attendees tried a teaching role, a company logo in the content, and content made with a coworker. All wrong.

The only person who was ever let go was because it was a woman. The six were men. - Daniel Space, HR instructor, author, and speaker at The HRBPs

Space added that the men’s content was in each case more explicit than hers, and often involved partners. In the follow-up meetings, the executives treated the men’s accounts as something close to a joke. The one woman, who reported into finance, got a different reaction.

Her boss, the CFO, was like, this is just such a disappointment. She was such a good person. And I’m like, she’s still a good person. How does her doing this change that? - Daniel Space

According to Space, she has not been able to find a new job since. That is the cost on the employee’s side. On the company’s side, seven decision makers each believed they were applying a neutral standard, which is how unconscious bias works. The pattern only shows when someone lines the cases up.

When does an employee’s personal account become HR’s business?

When it reaches the workplace, and usually not before. Space’s starting position is that what an employee does on personal time belongs to the employee.

What changes the picture is the reaction. In all seven cases the content stayed off company time and off company systems, yet HR still had work to do, because coworkers were talking and one employee was at the center of it. Space described how that shift was explained to the six who kept their jobs.

This is not the company’s business. It certainly wasn’t my business. However, the fact that employees were now talking about it now became the business for the company. - Daniel Space

The chat’s wrong guesses turned out to be a useful list of the situations where the company does have a stake. Between those guesses and the examples Rebecca raised, the session produced four.

• The account uses the company. A logo in the frame, the employer’s name, or commentary about the business. Space called these the straightforward ones.
• The posting breaks a rule the company already has. One attendee described letting an employee go for drinking on the job and posting about it while on shift.
• Patients or customers are exposed. Rebecca pointed to nurses who posted about patients on TikTok without consent, which collides with privacy law before any social media policy applies.
• Coworkers act on it. Gossip, exclusion, or bullying after a discovery is a conduct issue, and it belongs to the people doing it.

Space was hardest on a group inside the third category, clinicians who mock patients online. A patient in an exam room is at their most exposed, and Space argued that a good hospital protects that person’s dignity before anything else.

For everything in between, Space offered employees a test that needs no policy language at all.

If you wouldn’t do it in front of your boss, why would you do it here? - Daniel Space

Should hiring managers look at a candidate’s personal social media?

Only when the company can say in advance why the account matters for the role. Without that reason, a search produces impressions, and impressions are where the double standard gets in.

Rebecca described a hiring manager who rejected a candidate over an Instagram photo of the candidate holding a glass of wine. The reasoning was that a public photo with alcohol showed poor foresight. Space had seen the same thing split by gender. A woman doing shots in a video was read as a liability, while similar behavior from men on a sales team was read as a good fit for the group.

Space’s condition is that the company identify and define why the account matters before anyone opens it, and named two reasons that hold up. The first is a role in social media itself, where the account shows whether the candidate understands the medium. The second is a heavily client-facing role, where the question is whether clients would care, not whether the hiring manager does. Outside those, Space saw little justification.

I think it’s just so invasive, and you just have to be so transparent with candidates and with employees about why. I can’t stand when companies just sort of do it in secret. - Daniel Space

Rebecca ran into this early in a career spent largely in recruiting. Hiring entry-level sales staff in volume meant candidates whose college photos were the first image result for their names. Rebecca wrote a policy on screening candidates’ social media and coached the sales managers on it directly.

We can’t use this as part of someone’s application. We shouldn’t even be looking for these things, so we need you to Google less and resume more. - Rebecca Taylor, head of community and content at AllVoices

Space closed the topic with a newer risk. Searches now return AI summaries, and a summary can repeat an accusation without checking it. Space described losing an account to mass false reporting, then watching AI search results repeat the false allegation for a month. Rebecca connected it to an earlier AllVoices session on AI-generated evidence in ER investigations: doubt what you see and ask more questions.

Can a social media policy be specific enough to cover every post?

No, and Space argued it should not try. An attendee asked whether a policy should be highly specific or simply legally valid, and Space came down on the side of leaving room for judgment.

I think it’s vague because to me, you can’t quantify the whole of human existence as it relates to content. - Daniel Space

The pressure on policy is growing from the company’s own side. Rebecca noted that employers now ask staff to post on personal accounts to promote the brand, and that her own LinkedIn presence predates AllVoices and will outlast it. A company that asks for that visibility has accepted some risk. It cannot claim the account when the posts help and disown the person when one does not.

Space has been on the receiving end. At 26, with three weeks’ notice already given, Space wrote a Myspace post attacking the employer. A coworker in HR read it and told the boss. Space was fired a week before the planned last day. The boss called it poor judgment, and Space does not dispute that. The experience is why Space now argues for proportion.

You should be able to exercise independent judgment and not harm yourself or the company. But I think in many cases, overreacting to such a degree and demonizing someone for their social media is just such a mistake. - Daniel Space

Rebecca framed the same idea as the default for HR, ER, and people managers alike.

We have to think of this as sort of our opportunity to learn over punish. Because most of the time, someone just posts something stupid. They’re not posting something harmful. - Rebecca Taylor

One practical step came out of this stretch. Space recommends that employees who post often add a line to their profiles stating that their opinions are their own and not those of any employer. It will not settle every dispute. It costs nothing.

What should you do first when a manager brings you an employee’s post?

Slow down, and talk to the employee before anyone else. The manager’s urgency is real, but the post will still be there tomorrow, and a decision made in the first hour is a decision made on a reaction.

Rebecca used the example of a termination call that the employee streams live. Finding out that your own conversation is on TikTok invites a fast, emotional response. The better response is the one you would give every time. Rebecca laid out the order to work in:

1. Pause, and do not decide anything based on the post alone.
2. Have a conversation with the employee first, before the circle widens.
3. Plan what you say to the people who already saw it, so the employee is not singled out.

Space tested that order against the hardest case in the session. An employee at a client posted strong support for ICE, and the employee’s manager wanted an immediate termination. Space had a personal reason to be angry about the post, having watched someone close spend months in immigration detention. Space still argued against firing on the spot.

My anger is there too that someone would dare support this, but at the same time, firing him is just going to make him feel even stronger about that. - Daniel Space

Space drew a line here that matters for your process. A political opinion is one thing. A post that targets a group, including coworkers who belong to it, can do harm inside the company, and that harm is yours to address. Even then, Space argued, a conversation should come before a penalty. The AllVoices podcast has covered off-duty political speech that breaks no policy but leaves coworkers uneasy.

Space applied the same thinking to public pile-ons, having once joined in tagging a stranger’s employer over a racist comment.

There should be accountability. But if accountability just punishes them to such degree, is there another way that we can potentially do this so that the person not only has accountability and suffers the consequence of a bad action, but also learn from it? - Daniel Space

Rebecca reduced the triage to three bins: what is punishable, what is coachable, and what is not the company’s business. Most posts belong in the second or third.

Should a report about personal social media go in the case file?

Yes, but record that it was raised and how it was handled, not the content itself. Both speakers agreed on documenting. They were also clear about where it stops.

Space’s caution came from the OnlyFans investigations. Legal required blurred images of the content in the file. Space objected, on the grounds that the content could be described in words, and that someone had posed as a paying customer to get it.

I always think about documentation as it relates to what is necessary for the company to do versus at what point, if the employee saw it, would it be just such a violation of humanity? - Daniel Space

Rebecca agreed, and narrowed what the entry is for. The record is that a manager brought an account to HR, what the manager wanted done, and what HR did. The exception is content that is itself evidence, such as a post showing open hostility toward the company. The reason to write any of it down is what may come later.

In my experience in HR, most people don’t submit complaints the first time something happens or they don’t come to you the first time something happens. - Rebecca Taylor

A manager who brings you one employee’s Instagram may bring you another in six months. If both employees are women, or both are from the same team, you want to know that. Space learned it by not writing things down early in a career in HR, then being unable to reconstruct the first report when the second arrived. A record is what lets you say there is a pattern.

The entry itself should be plain: what happened and what was done with it, with no judgment attached.

Is LinkedIn treated differently from other personal accounts?

Yes, because the employer’s name sits next to every post and comment. That makes LinkedIn the one personal account where the company has a visible stake by default.

An attendee asked about employees sending connection requests to clients or patients. Both speakers separated the two. Patients are off limits. Clients are a gray area, and on LinkedIn a connection is close to exchanging business cards. Rebecca would not extend that to Instagram or Facebook, even with teammates.

The complication is that LinkedIn has changed. Rebecca observed that much of the content is personal now, and that people leave rude or discriminatory comments with an employer listed on the profile. Space asked how many women in the chat had received a flirtatious message there from a professional contact. The answers came fast.

Rebecca’s position is that a company needs a way to act when an employee’s profile is reported for hostile comments. The report may be a coaching moment. It may also belong in an investigation that is already open.

I’m not saying go and fire these people, but I am saying document the stuff if it does come to your attention because there could be something bigger there. - Rebecca Taylor

What to have in place before the next account lands on your desk

Decide the process now, while no one is standing in your doorway. The seven cases Space described did not go wrong because the companies lacked a policy. They went wrong, where they did, because each decision was made alone, in the moment, by people reacting to the person as much as the post.

A workable version is short. Know the few situations where a personal account is company business. Talk to the employee first. Write down who raised it and what you did. Then compare the outcome against the last similar case before you sign off.

Have a plan for what to do so you don’t have to figure it out when you’re staring at something you weren’t expecting to see. - Rebecca Taylor

That comparison is the part most teams cannot do from memory. AllVoices builds HR case management for this reason: every concern sits in one place, so the next decision can be checked against the previous ones.

The account is theirs. The consistency is yours. If two employees do the same thing off the clock and only one pays for it, nobody will ask what was posted.

Frequently asked questions