Most law firms have written rules for email, client files, and billing. Far fewer have written rules for social media, even though nearly every attorney, paralegal, and receptionist at the firm has at least one account, and many of those accounts list the firm by name.
That gap is where problems start. An associate posts a "great win today" photo that makes the client easy to identify. A paralegal answers a legal question in the comments. A former marketing coordinator still has the password to the firm's Facebook page. None of these require bad intentions. They happen because nobody wrote down how social media works at the firm.
A law firm social media policy fixes that. This guide walks through what to include, which professional conduct rules shape each section, and how to roll the policy out so people actually follow it.
This is educational marketing guidance, not legal advice. Professional conduct rules vary by state, so have your firm's ethics or employment counsel review your final policy.
A generic HR social media template is not built for lawyers. Attorneys carry professional obligations that follow them onto every platform, and firm leaders carry responsibility for the people they supervise.
The ABA made this explicit in Formal Opinion 480 (2018), which addresses confidentiality for lawyer blogs and other public commentary, including social media posts, videos, webinars, and podcasts. The duty of confidentiality does not relax because a post is casual or the platform is informal.
Under the ABA Model Rules, partners and lawyers with comparable managerial authority must make reasonable efforts to ensure the firm has measures in place that give reasonable assurance that its lawyers follow the Rules of Professional Conduct (Rule 5.1). Rule 5.3 applies a parallel duty to nonlawyers employed or retained by the firm, which includes staff and outside marketing vendors.
A written social media policy, backed by training, is one of the most practical ways to put those measures in place for a channel that every person at the firm uses.
Every firm's policy will look a little different depending on practice areas, size, and state. These are the sections that belong in almost every version.
Start by defining what the policy covers. Most firms address three categories:
Be specific about who is covered: partners, associates, contract attorneys, paralegals, administrative staff, interns, and any agency or freelancer that posts on the firm's behalf.
This is the most important section. Model Rule 1.6 prohibits revealing information relating to the representation of a client unless an exception applies, such as the client's informed consent. Formal Opinion 480 highlights several points that belong in plain language in your policy:
Turn those principles into clear examples. No photos taken in conference rooms where files or screens are visible. No posts about "today's hearing" that reveal the court, the date, and the type of case. No client names, tags, or check-ins without written consent.
Posts that promote the firm are attorney advertising, and Model Rule 7.1 prohibits false or misleading communications about a lawyer's services. Case results and testimonials raise particular concerns because they can create unjustified expectations, and many states impose additional requirements such as disclaimers or limits on how results are presented. Those requirements differ from state to state.
Your policy should say who may post results or testimonials, what approval is required, and which state rules apply to your firm. For more detail, see our guides on attorney advertising rules on social media and using client testimonials without violating ethics rules.
Model Rule 3.6 limits extrajudicial statements by lawyers participating in a matter when they know or reasonably should know the statement will be publicly disseminated and is substantially likely to materially prejudice the proceeding. The rule also restricts other lawyers in the same firm from making statements the participating lawyer could not make. Formal Opinion 480 also points to Rule 3.5, which prohibits improperly attempting to influence judges, jurors, and other officials.
The simplest policy approach: no one posts or comments about an active firm matter without approval from the responsible attorney. That includes sharing news articles about the case.
Comments and direct messages invite people to ask for advice. Formal Opinion 480 notes that lawyers should take care not to unintentionally create a lawyer-client relationship through interactive online commentary, and Model Rule 1.18 can create duties to prospective clients who share information.
Your policy should require staff and attorneys to keep public answers general, avoid applying the law to someone's specific facts in a comment thread, and route inquiries to the firm's intake process. Our guide to handling social media DMs from potential clients lays out a step-by-step workflow you can reference in this section.
Model Rule 7.2(c) generally prohibits stating or implying that a lawyer is certified as a specialist in a field unless the lawyer has been certified by an approved organization and that organization is clearly identified. States handle this differently, and words like "specialist" or "expert" can be restricted. Your policy should list the approved descriptions for each attorney and practice area so nobody improvises in a bio or caption.
Rule 1.6(c) requires reasonable efforts to prevent unauthorized access to client information. On social media, that means:
Many teams now use AI tools to draft captions, summarize articles, or reply to comments. The ABA's Formal Opinion 512 (July 2024) explains that lawyers using generative AI must still meet their duties of competence, confidentiality, communication, and supervision. Your social media policy should state which tools are approved, prohibit entering client or prospective client information into tools that have not been vetted, and require a person to review AI-assisted content before it is published.
Rules for staff's personal accounts need extra care. Under the National Labor Relations Act, employees have protected rights to discuss wages and working conditions, and the National Labor Relations Board has repeatedly scrutinized overly broad employer social media rules. The standard the NLRB uses to evaluate workplace rules has changed several times in recent years, and the agency's general counsel has signaled that it may change again.
The safest approach is to keep personal-account rules narrow and tied to legitimate needs, such as protecting client confidentiality and not speaking on behalf of the firm without authorization, and to have employment counsel review that section before rollout.
Spell out what happens when something goes wrong: a confidential detail is posted, a negative review names a client, or a comment thread turns hostile. Name who gets notified, who can remove content, and who speaks for the firm. Our guide on creating a social media crisis plan for law firms covers this in more depth.
A policy that sits in a shared drive does not protect anyone. A few steps make it stick:
Strict rules with no support push people toward two bad outcomes: they stop posting altogether, or they post anyway without review. The firms that get this right pair a clear policy with a reliable content process, so attorneys have accurate, approved material to share and someone accountable for every post that goes out.
That is where outside help can pay off. Attorney-written social media content gives your team posts that already reflect professional conduct requirements, and law firm social media management puts a trained team in charge of publishing, monitoring, and escalation under your policy, with compliance built into every step.
A law firm social media policy is not about stopping people from posting. It is about giving every attorney and staff member clear guardrails so the firm can be visible, helpful, and trustworthy online without putting clients or licenses at risk. Define the scope, put confidentiality first, set approval rules for advertising content, secure your accounts, and train your team.
Social Lawyers was built by lawyers, and we work only with law firms. We understand the rules that shape legal marketing because we have lived them. If you want a social media program that follows your policy and still grows your practice, contact our team or start with a free law firm social media audit.
