managing social media risk - scce official site · vp of membership development scce www ......

32
5/21/2014 1 www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977 MANAGING SOCIAL MEDIA RISK Adam Turteltaub VP of Membership Development SCCE www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977 Disclaimer I’m not a lawyer and this is not legal advice The SCCE does not have an official recommendation. What follows is an examination of what is going on I’m hopeless – Facebook – LinkedIn – HCCAnet Even Twitter (very rarely) 2

Upload: phungdien

Post on 19-Apr-2018

223 views

Category:

Documents


3 download

TRANSCRIPT

Page 1: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

1

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

MANAGING SOCIAL MEDIA RISK

Adam TurteltaubVP of Membership Development

SCCE

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Disclaimer

• I’m not a lawyer and this is not legal advice

• The SCCE does not have an official recommendation. What follows is an examination of what is going on

• I’m hopeless

– Facebook

– LinkedIn

– HCCAnet

– Even Twitter (very rarely)

2

Page 2: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

2

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

How would you describe your use of social media?

A. I never use Myface, Spacebook or LinkedUp

B. I use it somewhat

C. I use it frequently

D. Sorry, what were you saying? I’m updating my status.

3

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

How Social Media Looks to Compliance Officers

4

Page 3: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

3

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

How Social Media Looks to Employees

5

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Have you had to terminate an employee over social media issues other than wasting company time?

6

Page 4: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

4

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

The Original Social Media

7

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

The Reaction

• “You are deliberately misrepresenting how you look when you hunt.”

• “What are you doing telling everyone about our hunting party? The competing clans will all find out!”

• “Did you clear it with the chief that you’re just splattering this where everyone can see?”

• “Great, now the deer are going to sue us.”

• 27 clubs up (Pleistocene era likes)

8

Page 5: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

5

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

The Evolution

9

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

The Change?

• Speed of communications

– Can update faster than we can think

• Ability to reach so many people

• Put another way: Never before has mankind had the opportunity to offend so many people so many ways and so permanently

10

Page 6: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

6

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Proliferation of Choices

• Facebook

• MySpace

• Twitter

• Flickr

• Instagram

• LinkedIn

• Pinterest

• Google+

• Ning

• Plus a thousand more in a thousand garages

11

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

A New Equation

• How we think of risk:

– Risk = Hazard

• Sandman’s Equation:

– Risk = Hazard + Outrage

• Social Media Equation

– Risk = (Hazard + Outrage) x Social Media

12

Page 7: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

7

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Today

13

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Opportunities to Access Social Media

• Ubiquity is the rule

– Desktop

– Laptop

– Tablet

– Smartphone

• Number one usage of cell phones today among the younger generation:

– Texting

14

Page 8: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

8

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SOCIAL MEDIA IN THE WORKPLACE: RESEARCH DATA

15

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Ethics Resource Center Data

• Examined social media usage in two studies

– 2011 National Business Ethics Survey

– 2012 supplemental survey

• Key findings:

– >1 in 10 employees spend at least 30% of their workday linked to one or more social networks

– 3/4s of workers surveyed report belonging to one or more social networks (as of 2011)

– 72% of workers 30+ take part in social networks

– 72% report using social networks during every workday

– 28% spend an hour or more each day this way

16

Page 9: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

9

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Ethics Resource Center Data

• Less likely to social network at work:

– Employees who intend to remain at the company for 5+ years

– Non-management

• More likely to social network at work:

– Under age 30

– Middle managers

– Top managers

• Segmented workers into three groups:

– Non-work social networkers (28%)

– Moderate social networks at work (62%)

– Active social networks: 30%+ of their time at work on social networking sites (10%)

17

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Ethics Resource Center Data

• Active Social Networkers (ASN)profile:

– 4 of 10 in middle management

– 47% are under 30 (vs. about 25% of total workforce)

• The more active the social networker the more likely they are to use a mixture of work and personal equipment, even at work

– Makes control more difficult

• Evidence that relationships at work are now also on social networks as well

– 42% of supervisors have an online connection to an underling

• 60% among ASNs

– Majority of supervisors say posts have an impact on their thinking about employees

18

Page 10: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

10

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Ethics Resource Center Data

• Some good news about feelings of responsibility

– 79% consider how their employer would react before posting work-related content

– 64% consider how employer would react to personal information posted

– 84% of supervisors consider what their reports would think

– 61% report being unlikely to post about their company being in the news

– BUT: ASNs are fare more likely to share work-related content via social media

19

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Ethics Resource Center Data

• ASNs face greater ethics risk than others

– Witness more misconduct

– Report more pressure to compromise standards

– Report experiencing more retaliation

– Oddly, though, they have positive views of management’s commitment to ethics

• Not surprisingly, ASNs are also less wedded to their jobs

– 72% report being likely to change employers within five years (vs. 40% for rest of US workers)

20

Page 11: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

11

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

THE RISKS

21

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SCCE Data Breach Survey Findings

• 68% suffered a breach in last year

• 20% had four or more

Page 12: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

12

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SCCE Data Breach Survey Findings

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Don’t Forget The Risks of “Controlled” Social Media

• It’s not just nurses and their patients

– HIPAA is just one risk

• Marketing department and others with official roles often make mistakes

– Don’t appreciate that social media is official media

– Rely on automation

24

Page 13: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

13

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Notable Errors

• Kenneth Cole during Egyptian revolt:

– “Millions are in uproar #Cairo. Rumor is they heard our new spring collection is now available online at….”

– Lesson: Tying into breaking issues has risks

• MSN

– “Bee Gees co-founder Robin Gibb dies at 62. Click ‘like’ to pay your respects.”

– Lesson: “Like” can be a poor choice to show support

• NRA the day of the Aurora Shooting

– “Good morning, shooters. Happy Friday! Weekend plans?”

– Lessons: Pre-scheduled tweets can be dangerous. When something big happens, be sure you haven’t just said something that looks bad.

• Chrysler

– “I find it ironic that Detroit is known as the #motorcity and yet no one here knows how to f------ drive

– Lesson: Make sure you’re using the right account

25

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Beyond Your Control

26

Page 14: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

14

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Beyond Your Control

27

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

One More Wrinkle: BYOD

• Rising trend in business of BYOD: Bring Your Own Device

• Challenges in setting controls of what employee does on his or her own property

28

Page 15: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

15

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Legal Considerations

• Employment-related

– Discrimination

– Harassment

– Labor

• Privacy and data protection

• Defamation and free speech

• Intellectual property

29

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Legal Considerations

• Confidentiality/Privacy

– Disclosures by staff

– Prying into private lives

• Liability for establishing the forum for expression

• Material disclosures

• May not be possible to restrict or discipline for lawful activity outside of the workplace

30

Page 16: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

16

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

NLRB

• “The National Labor Relations Act protects the rights of employees to act together to address conditions at work, with or without a union. This protection extends to certain work-related conversations conducted on social media, such as Facebook and Twitter.”

– The caution: “Employer policies should not be so sweeping that they prohibit the kinds of activity protected by federal labor law, such as the discussion of wages or working conditions among employees.”

• Even disclosing confidential information may counts as protected

– The reassurance: “An employee’s comments on social media are generally not protected if they are mere gripes not made in relation to group activity among employees.”

– The challenge: What’s a gripe and what’s a discussion?

31

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

NLRB

• Multiple reports issued explaining actions

– Business community still uncertain

– See www.nlrb.gov/node/5078

• Consistent focus on Section 7 rights to concerted action and to offer mutual aid or protection

– Can be difficult to see that a policy calling for not disclosing confidential information could be seen as a violation

• Salary data is confidential

32

Page 17: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

17

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

WHAT TO DO?

33

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

The Temptations

34

Page 18: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

18

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

The Temptations

35

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Does your organization have a social media policy?

A. Yes

B. No

36

Page 19: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

19

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Does it cover:

A. Employee personal use

B. Official spokesperson use

C.Use of internal social media

D.Use in recruiting

37

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Not Just One Policy

• At least four uses to address:

– Employee speaking for him or her self on public social media

• Or inadvertently for the company

– Employees using internal social media

– Official corporate spokespeople

– Managers and HR when hiring

• Each has different roles and risks

38

Page 20: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

20

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

CEB Recommendations for Effective Social Media Policies

• Defines the appropriate use of social media at work and at home

• Clearly states when an employee can or cannot act as a representative of the company

• Explicitly explains what employees can and cannot discuss publicly

• References appropriate employee behavior as defined by code of conduct, privacy, disclosure guidelines, or other applicable policies already in place

• Reminds employees that regular corporate standards and values apply to all posts

• Encourages employees to be forthright about their identify and to own what they post

• Includes industry, culture, or other company specific requirements

39

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

CEB Recommendations for Effective Social Media Policies

• Reserves company right to judiciously remove any comments or posts

• Explains consequences of policy violations

• Includes clause prohibiting inappropriate content

• Policy language is simple, clear and easy to understand

40

Page 21: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

21

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SEC

• April 2013 began permitting publicly-traded companies to announce earnings on social media

– Investors must first be informed that information will be posted there

– “But the next time material information is disclosed on an executive’s Facebook page without the company alerting all shareholders to look there for information, the matter will likely be met with an SEC lawsuit instead of a report.”

• Gene Goldman, McDermott Will & Emery LLP

41

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

PUTTING IT ALL TOGETHER

42

Page 22: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

22

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Social Media Policy

• You need a policy that:

– Covers all uses

• “Personal”

• Official

• HR-related

– Protects privacy

– Respects existing laws

• NLRB

• But also need to ensure that it is understandable to employees

– Training is essential

43

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Virtue of a Policy and Education

• ERC data revealed policy making lags

– 72% of companies have a code of conduct

– 46% have established rules for Internet use

– 32% have rules relating to social networking

• Enormous benefits to those with policy

44

Page 23: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

23

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SN Policy Linked to more Scrupulous Attitudes About Social Networking

45Source: Ethics Resource Center

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Training and Risky Behavior% Who Agree or Strongly Agree

46Source: Ethics Resource Center

Page 24: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

24

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SAMPLE POLICIES

47

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Ford

48

Page 25: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

25

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

IBM

49

(partial)

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

SUTTER HEALTH

50

Page 26: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

26

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977 51

Full Policy:7 Pages

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977 52

Tip Sheet1 Page

Page 27: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

27

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977 53

www.sutterhealth.org/employees/social-media-policy.html

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

THINK POSITIVE

54

Page 28: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

28

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Social Media As Asset

55

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Social Media As Asset

56

Page 29: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

29

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Social Media As Asset

57

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

AND REMEMBER TO KEEP REVIEWING YOUR POLICY

58

Page 30: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

30

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

What’s Hot Keep Changing

• Search Engine 101

– Excite

– Alta Vista

– Ask Jeeves

• MySpace

– From first to something else

59

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Circular Evolution of Electronic Communication

60

Page 31: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

31

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

And Social Media is Not the First Cause for Terror

61

We survived them all!

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Sources

• Ethics Resource Center

• CEB (Corporate Executive Board

– Compliance and Ethics Leadership Council

– General Counsel Roundtable

• socialmediagovernance.com

• www.nlrb.gov/node/5078

62

Page 32: Managing Social Media Risk - SCCE Official Site · VP of Membership Development SCCE www ... generally not protected if they are mere gripes not made in relation to ... – Employee

5/21/2014

32

www.corporatecompliance.org | +1 952 933 4977 or 888 277 4977

Thank You!

Adam Turteltaub

[email protected]

63