Social media screening is legal, but only if done right. Here are the essentials.
Federal nondiscrimination laws still apply.
Anything that reveals protected characteristics (race, religion, disability, age, pregnancy, etc.) cannot influence a hiring decision.
Using a third‑party screener? That triggers the FCRA.
Employers must provide a standalone disclosure, get written authorization, and follow pre‑adverse and adverse‑action steps. Accuracy rules also apply and the CFPB is enforcing them more aggressively.
28 states restrict employer access to personal social media.
Most ban requesting login credentials, requiring applicants to log in on the spot and demanding they add HR as a “friend.” In some states, even asking for a username may create risk.
Public vs. private content matters.
Employers may review public posts but accessing private content without permission can violate the federal Stored Communications Act.
NLRA protections apply online.
Employees’ posts about wages or working conditions may be protected concerted activity. Don’t treat them as negative findings.
California adds extra compliance layers.
ICRAA and CCRAA impose stricter disclosures when using third‑party screeners.
Best Practices
Use a consistent, documented process focused ONLY on job‑related behaviors (e.g., threats, fraud, harassment). Keep decision makers away from protected information. Never request access credentials. Stick to public content. And follow the FCRA if a third-party is involved.
Disclaimer: This communication is for general informational purposes only and does not constitute legal advice. The summary provided in this alert does not, and cannot, cover in detail what employers need to know about the amendments to the Philadelphia Fair Chance Law or how to incorporate its requirements into their hiring process. No recipient should act or refrain from acting based on any information provided here without advice from a qualified attorney licensed in the applicable jurisdiction.

