Government Social Media Policy: What to Include and How
How to write a government social media policy: the eight core elements, comment and blocking rules, records, accessibility, ownership and review, with real agency examples.
Government Social Media Policy: What to Include and How
A government social media policy is the written rulebook that says who may post for your agency, what they may say, how the public may respond, and how posts are kept as records. A good one covers eight areas: employee access, account management, acceptable use, employee conduct, content, security, legal issues, and citizen conduct. It also names an owner for every official account and gets reviewed on a schedule. This guide walks through each part, with examples from real agencies.
MediaclickConnect Residents With Clear InformationMediaclick builds websites and targeted campaigns for local governments to help them communicate their offerings and engage with their audiences.Explore municipal web solutions
TL;DR
Build the policy around eight elements Brookings identified: access, account management, acceptable use, conduct, content, security, legal issues and citizen conduct.
Treat official accounts as public forums: write comment rules based on categories of content, never on viewpoint, and be careful before blocking anyone.
Treat posts and messages tied to government business as public records, and set retention and capture rules before a records request arrives.
Name one accountable owner per account, require training before access, and revoke access the day someone leaves.
Review the policy on a fixed cycle, such as every 12 months.
Table of Contents
What a government social media policy does
The eight elements every policy needs
Employee access and account ownership
Rules for comments, blocking and removing content
Employee personal use and the line with official speech
Records, privacy and public access
Accessibility and security
Legal differences across jurisdictions
Our perspective
A starter outline you can adapt
Putting the policy to work
Need a website and campaigns that match your policy?
FAQ
Sources
What a government social media policy does
Social media blurs lines that used to be clear. A clerk posting a road closure, a council member sharing a constituent story and a public works employee venting on a personal account all use the same platforms. Brookings describes a social media policy as an important first step in addressing these blurred boundaries between agency, professional and personal use.
The Center for Technology in Government at the University at Albany frames the purpose more broadly: a policy can help agencies use social media responsibly and effectively to improve services and enable citizen engagement while mitigating risks. The same paper notes that governments face a choice between reinterpreting older internet policies and writing new social media policies. In practice, most agencies do both: they keep their general acceptable-use and records rules and add a social media document that points to them.
A policy that works does three jobs:
It protects residents, by making sure official information is accurate, accessible and consistent.
It protects employees, by telling them in plain terms what is expected on official and personal accounts.
It protects the agency, by setting rules on speech, records and security before a problem forces the issue.
The eight elements every policy needs
Brookings’ framework is a useful skeleton because it matches how disputes actually arise. Here is each element, what it should say, and a practical way to write it.
Element | What it settles | Example of a clear rule |
|---|---|---|
Employee access | Who may use social media at work, and on which platforms | Only trained staff approved by the account owner may post |
Account management | Who creates, owns and closes accounts | One primary contact per account; no accounts without approval |
Acceptable use | What agency time and equipment may be used for | Limited incidental personal use that does not harm productivity or security |
Employee conduct | How staff behave online | Follow the same ethics rules online as offline |
Content | What the agency posts and how | Posts link back to the official website as the source of record |
Security | Passwords, devices, phishing | Unique credentials, multi-factor sign-in, immediate revocation on departure |
Legal issues | Records, speech, privacy, accessibility | Posts are retained as records; comment moderation follows written criteria |
Citizen conduct | What the public may post on your pages | Public community guidelines linked from every account |
The rest of this guide goes deeper on the parts that most often cause trouble.
Employee access and account ownership
Start with who is in charge. The U.S. Department of the Interior’s digital media policy requires each official account to have a primary contact responsible for security, employee access and training, and requires employees to complete mandatory social media training before they get access. It also treats accounts created for official business and maintained with government resources as government property.
A city or county does not need federal-scale bureaucracy, but the principle scales down well:
One named owner per account. A job title is better than a person’s name, so ownership survives turnover.
A written list of approved posters. Keep it with the account owner and update it when roles change.
Training before access. Cover the policy itself, records rules, accessibility basics and how to handle hostile comments.
Agency-controlled credentials. Accounts should be registered to an agency email address, never a personal one.
What to do when someone leaves
Departing employees are a common security gap. New Carrollton, Maryland, writes it into its social media policy: when an employee with account access leaves, passwords are promptly changed and that person’s access is revoked. Put this on your offboarding checklist, next to returning keys and laptops.
Rules for comments, blocking and removing content
This is where government policies differ most from corporate ones. A private company can moderate its page however it likes. A government agency’s official page is different, because the First Amendment limits what a public body can do about speech from the public.
The Congressional Research Service explains that in March 2024 the Supreme Court issued its ruling in Lindke v. Freed, which addresses when a public official’s decision to block a citizen from a social media account implicates the First Amendment. The case turns on whether the official is acting as a government actor or a private person. The same CRS analysis notes that the ruling leaves some questions open. Your policy should not try to settle those questions. It should make the agency’s account clearly official, and its moderation rules clearly written and consistently applied.
Write rules by category, not by opinion
The City of Flagstaff, Arizona, offers a model. Its social media directive links to public community guidelines and lists categories of comments that may be hidden or deleted, including threats, spam and off-topic comments. The key is that the categories describe the type of content, not whether the agency agrees with it.
A workable comment policy usually includes:
A short set of public community guidelines, linked from the profile of every official account.
Defined categories for removal, such as threats, spam, obscene content, personal data of private individuals and clearly unrelated posts.
A rule that criticism of the agency, its officials or its decisions is not grounds for removal.
A step to capture a screenshot and note the reason whenever content is hidden or deleted, so the action can be explained later.
A review path to the agency’s attorney before anyone blocks a user.
Publish the guidelines where residents can find them. A rule nobody has seen is hard to enforce fairly.
Employee personal use and the line with official speech
Staff have personal lives online, and a policy that ignores this invites confusion. The Office of Personnel Management’s guidance says employees should maintain separate personal and professional accounts. Where personal accounts discuss government work, it encourages disclaimers stating that the views are the employee’s own and not the agency’s. The same document reminds federal employees that the Hatch Act prohibits certain political activities, including on social media.
State and local agencies often write their own version. Virginia’s technology agency policy allows limited incidental personal use of agency resources as long as it does not harm productivity, operations or security, and says employees must not use agency email to register for personal social media accounts.
When you draft this section, keep it short and concrete:
Say which rules apply on personal accounts (confidential information, political activity limits that apply to your employees, no implying the agency endorses a view).
Recommend disclaimers where staff identify their employer.
Point to existing ethics and political activity rules rather than restating them in different words, which creates conflicts.
Appropriations and lobbying limits
Federal rules also restrict what agency resources can say. The Interior Department’s manual states that using government resources for messages that constitute publicity, propaganda or lobbying violates appropriations provisions, and that directly asking the public to contact Congress is prohibited. State and local governments have their own rules on advocacy and campaign activity, so have counsel confirm which apply to you before the policy goes out.
Records, privacy and public access
Official posts are not just messages. They are records. The Utah State Archives guideline says social media content relating to government business, and accounts created by government, are government records subject to the laws governing government records. Rules differ by state, so check your state archives or records authority for the retention schedule that applies.
Your policy should answer four questions:
What counts as a record? Posts, comments you reply to, direct messages about government business, and any content you remove.
Where is the copy kept? Platform archives are not a records system. Name the tool or process that captures content.
How long is it kept? Tie each content type to your retention schedule.
Who responds to a records request? Name the records officer and the account owner.
If you are building a retention schedule from scratch, a data retention policy template can help you structure the categories, owners and deletion rules, even though you will need to adapt the legal periods to your own jurisdiction.
Accessibility and security
Public communication has to work for every resident. The Interior manual requires compliance with Section 508 and says its websites must conform to WCAG 2.0 Level AA. Even if your agency is not bound by the same standard, the habits carry over to social posts: add alt text to images, caption video, avoid posting key information only as a flyer image, and put the full details on an accessible page of your website. If you are working on the website side, our guide to government website accessibility and the 2027 ADA Title II deadline covers what to prepare.
For security, keep the policy practical:
Unique, strong passwords stored in an approved manager, never shared in chat or spreadsheets.
Multi-factor authentication on every official account.
A short list of devices that may hold logged-in sessions.
A named person to call when an account is compromised, with a rule to notify leadership and the records officer.
A warning about phishing messages that imitate platform support teams.
Legal differences across jurisdictions
Everything above reflects the United States. Elsewhere the rules differ. An Oxford report on digital media regulation notes that in the U.S., content-based speech restrictions are subject to strict scrutiny, while in other countries laws governing physical spaces have often been extended to digital content. The same report notes that internationally, online freedom of expression is protected under Article 19 of the ICCPR but is not absolute, allowing restrictions that meet tests of legality, legitimacy and necessity.
New Zealand shows how another government handles the process: its public service guidance says agencies must periodically review their social media policy and transparency statement, for example every 12 months. If you operate outside the U.S., or serve residents in more than one country, have local counsel review the legal sections.
Our perspective
We build websites and run advertising for municipalities and law firms, so we see the same pattern in every engagement: the social media account is rarely the problem. The problem is that nobody decided what the account is for.
A policy works best when it is tied to the agency’s website and to its goals. Every post should lead residents to an official page that is accessible, current and easy to act on. When we design civic sites, we plan the social channels and the website together, so the policy can say plainly that the website is the source of record and that social posts point back to it.
We also think reporting belongs in the policy. If you are posting or paying to promote a message, someone should be reviewing what residents actually did with it: which notices were read, which forms were started, which questions kept coming in. Our approach is built on data, transparent reporting and continuous optimization, and we think public agencies deserve the same discipline as any business that wants qualified results from its audience.
Finally, we believe clear branding is part of trust. When every account carries the same name, logo and tone, residents can tell what is official. That is a policy matter as much as a design one.
the author
A starter outline you can adapt
If you need to get to a first draft quickly, this structure covers the ground above and fits on a few pages:
Purpose and scope. Which accounts, which employees, which platforms.
Definitions. Official account, personal account, record, moderator.
Roles. Account owner, approved posters, records officer, legal counsel, IT security.
Creating and closing accounts. Approval steps, naming and branding standards, registration with agency email.
Posting standards. Accuracy, tone, accessibility, links back to the official site, emergency messaging procedures.
Public comments. Link to community guidelines, categories for removal, documentation steps, escalation before blocking.
Employee personal use. Disclaimers, confidentiality, political activity rules, use of agency resources.
Records and retention. What is captured, where it is stored, for how long, and how requests are handled.
Security. Credentials, multi-factor sign-in, incident response, offboarding.
Training and enforcement. Required training, consequences of violations, how to report concerns.
Review. Owner, cycle (for example every 12 months), and change log.
Keep the language plain. Staff will only follow a policy they can read in one sitting, and residents may read the public-facing parts too.
Putting the policy to work
A policy only matters if it changes daily habits. Three steps help:
Train once, then refresh. Run a short session when the policy is adopted and a refresher whenever platforms or rules change.
Test it on a real scenario. Walk staff through a hostile comment, a hacked account and a records request, and see where the policy is silent.
Measure what the accounts achieve. Track reach, clicks to official pages and service requests, and use the results to decide what to post next. Our guide to Meta ads reporting shows how to build reports that support decisions.
Need a website and campaigns that match your policy?
A policy is easier to follow when the website behind it is clear, accessible and built for residents. We design and develop civic websites, branding and paid campaigns for municipalities, with analytics and reporting so you can see what works. See how we modernized the web presence for the Borough of Englewood Cliffs, or explore our web design, brand design and paid media services.
If you want a site where social posts land on pages that are easy to read and act on, start at Media Click AI and tell us what your community needs.
FAQ
Does a government agency need a social media policy?
In practice, yes. Even where no law requires one, a written policy settles who speaks for the agency, how records are kept and how comments are moderated. The research from the Center for Technology in Government describes a policy as a way to use social media responsibly while managing risk. Writing it before a dispute is far easier than writing it during one.
Can a government account delete comments or block users?
It can remove content in defined categories, such as threats or spam, if the rules are written, public and applied consistently. Blocking is riskier because of First Amendment limits, as the Supreme Court’s Lindke v. Freed decision shows. Route any block decision through your agency’s attorney first.
Are government social media posts public records?
Generally, content relating to government business is treated as a government record, as the Utah State Archives guideline states. Retention periods and rules differ by state and agency. Check with your state archives or records authority and capture posts in a system you control.
Can employees post about their work on personal accounts?
Often yes, within limits. Federal guidance encourages separate personal and professional accounts and a disclaimer that views are the employee’s own. Your policy should also point to the political activity and confidentiality rules that apply to your staff.
How often should the policy be reviewed?
New Zealand’s public service guidance gives every 12 months as an example review cycle. Many agencies also review after a platform change, a security incident or a change in law. Assign an owner and record each change in a log.
Sources
Social Media Policy White Paper, Center for Technology in Government
Lindke v. Freed and Government Officials’ Use of Social Media, Congressional Research Service
Social Media Use Guideline for Government, Utah State Archives
Regulation of Digital Media and Intermediaries, University of Oxford
Guidance for public servants’ official use of social media, New Zealand Public Service Commission