HR policies and governance for Social Media Agencies: rules on access, conduct and personal posting
A social agency holds the keys to its clients' public voice. A short set of policies on account access, conduct and personal posting prevents the mistakes that make news.

Not sure what you need? Tell us about your business in six short steps and we will come to the first meeting prepared.
Share your requirementsWhy HR policies and governance matters in social media agencies
Social agencies grow fast, and the rules are often a chat message from the founder. A designer posts from a client's account when she meant to use her own. A moderator replies sharply to a customer. A former employee still has a client's login. Each is a policy gap, not just a person's error.
Policies here should be short and specific. Who may hold client credentials, how access is granted and removed, what the approval path is for a post, how to respond to public complaints and what staff may say on their own profiles. Written in plain language and given to people at joining, they reduce errors and make discipline fair when something goes wrong.
How to set it up
1. List the risks first
Wrong-account posts, shared passwords, rude replies, leaked plans, personal posts about clients. Rank by what hurts most.
2. Write an access policy
How credentials are held, who may have them, how access ends on exit and who checks monthly. Confirm data duties with a qualified professional.
3. Write a posting and reply standard
The approval path for posts, a tone guide for replies and what must be escalated. Keep it to a page.
4. Write a personal posting guide
What staff may and may not say about clients, competitors or the agency on their own profiles. Give examples.
5. Issue and acknowledge
Give the policies at joining, ask for a signature and revisit each year. Keep them with other employee information records.
Check these first
Before changing anything, find out what is true today. These take an afternoon and use your own records.
- List everyone who has access to each client account.
- Check whether a leaver's access was removed on the day.
- Read your last wrong-post incident and the rule that would have stopped it.
- Ask staff if they know the personal posting guide.
GullyHR can do this with you. Read how we approach HR policies and governance in general, or share your requirements and we will tell you where to start.
Questions owners ask
Usually the one on account access, since it protects clients and the agency. Know who holds credentials, review monthly and end access on exit day.
Yes. A signed acknowledgement shows they have read the rules and gives you a basis for fair action. Explain the policies at induction in a short session instead of only emailing them.
Review them once a year and after any incident. Keep them short enough that they are read. Note the date of each version so staff know which one applies.