Yes. Financial services employees face risks of insider information. Healthcare employees face HIPAA implications. Legal professionals face client confidentiality obligations. We tailor scenarios to reflect the specific social media risks your employees encounter in their roles.

The confidentiality obligation applies regardless of how the information was communicated or how casually it was shared. The scenario in this training — information overheard at a work dinner and posted to a personal account — illustrates that the channel through which information was received does not determine whether it is confidential.

Yes, and they are encouraged to do so. Liking and sharing posts from the company's official accounts, sharing approved information about events or presentations, and expressing genuine personal enthusiasm about work achievements are all appropriate and welcome. The policy draws the line at unauthorized speaking on behalf of the company, not at positive personal engagement.

Report it to their manager. Employees should not engage with the content publicly — commenting, sharing, or attempting to correct it online can compound the problem. The right path is internal escalation, which allows the organization to respond appropriately.

The policy still applies to content that could be traced to the organization or that involves confidential information about clients, colleagues, or internal matters. The absence of an employer reference in a profile does not protect the employee or the organization from the consequences of prohibited content.

Yes. If an employee identifies themselves as working for the organization — or if content is clearly connected to their professional role or their employer's clients — the policy applies regardless of whether the account is personal or official. The training addresses this directly, because it is the most common source of confusion.