Social Media Policy (India)

A Social Media Policy in India establishes the framework of rules governing the area it covers and the steps taken when those rules are broken.

The proliferation of social media has created new legal and reputational risks for Indian employers. A careless post by an employee can disclose confidential information, breach insider trading regulations (for listed companies under SEBI Insider Trading Regulations 2015), defame competitors, or damage the company's brand with customers. Conversely, employees have a legitimate interest in expressing their views online, and overly restrictive policies risk infringing on rights of free expression.

The IT Rules 2021 have significantly expanded the compliance obligations of social media platforms operating in India, and created a more transparent and accountable environment for online content. For companies that are themselves 'significant social media intermediaries' (those with more than 50 lakh users), or that use social media as a primary customer engagement channel, the IT Rules 2021 impose specific obligations including appointment of a Grievance Officer, a Nodal Contact Person, and a Chief Compliance Officer.

A Social Media Policy documents the company's guidelines for official social media management, employee personal use rules, brand protection measures, and the disciplinary consequences of policy violations. It is typically accompanied by a Social Media Brand Guide for the marketing team and an Acceptable Use Policy for general IT systems.

The legal framework governing the Social Media Policy (India) in India draws on several key statutes and regulatory bodies. Under Indian law, the Indian Contract Act 1872 governs contractual obligations, with Section 10 setting essential requirements for valid agreements. The Companies Act 2013 regulates corporate entities through the Registrar of Companies (ROC) and Ministry of Corporate Affairs (MCA). The Industrial Disputes Act 1947 and state labour commissioners govern employment disputes. The Information Technology Act 2000 and IT (Reasonable Security Practices) Rules 2011 protect personal data. The Income Tax Act 1961 and Goods and Services Tax Act 2017 govern tax obligations through the Central Board of Direct Taxes (CBDT) and GST Council. Parties executing a Social Media Policy (India) in India should confirm the document reflects current law, including any amendments enacted since the original drafting date. The Indian Contract Act, 1872 sets the foundational requirements.

A Social Media Policy is essential for any Indian business with employees who have internet access and use social media — which today means virtually every business with a workforce.

Companies with a consumer-facing brand need a Social Media Policy to protect their reputation. A single ill-considered post by an employee can trigger a social media crisis — and without a clear policy, employers lack the framework to respond quickly and consistently.

Companies with publicly listed securities need a Social Media Policy that specifically addresses SEBI Insider Trading Regulations 2015 (Prohibition of Insider Trading) — employees who are 'designated persons' (insiders) are prohibited from communicating unpublished price-sensitive information (UPSI) through any channel, including social media.

Companies that operate official social media channels — marketing, customer service, and employer branding accounts — need a policy that defines who is authorised to manage these accounts, what types of content can be published, and how customer complaints received via social media are escalated to the grievance redressal mechanism required under the IT Rules 2021 and the Consumer Protection Act 2019.

Companies in regulated sectors — financial services, pharmaceuticals, healthcare, and food and beverage — need a Social Media Policy that is specifically calibrated to the additional restrictions imposed by sector regulators (RBI, SEBI, IRDAI, FSSAI) on marketing communications and financial promotions.

Any company that has recently experienced a social media incident — negative viral content, employee misconduct online, or a customer complaint campaign — should immediately formalise its social media policy to prevent recurrence.

Parties in India should prepare a Social Media Policy (India) proactively rather than waiting for a dispute to arise. Courts interpret agreements based on the written terms rather than oral representations. Under Indian law, the Indian Contract Act 1872 governs contractual obligations, with Section 10 setting essential requirements for valid agreements. The Companies Act 2013 regulates corporate entities through the Registrar of Companies (ROC) and Ministry of Corporate Affairs (MCA). The Industrial Disputes Act 1947 and state labour commissioners govern employment disputes. The Information Technology Act 2000 and IT (Reasonable Security Practices) Rules 2011 protect personal data. The Income Tax Act 1961 and Goods and Services Tax Act 2017 govern tax obligations through the Central Board of Direct Taxes (CBDT) and GST Council. Where the transaction involves regulated activities, prior approval from the relevant authority may be required before execution.

A thorough Social Media Policy for an Indian company should contain the following key elements.

Scope: Application to all employees (permanent, contractual, and temporary), interns, consultants, and authorised brand ambassadors. Distinction between personal social media use and use of official company accounts.

Personal Use Guidelines: Rules for employees posting on personal accounts, including disclaimers distinguishing personal views from company positions, prohibitions on disclosing confidential information, and guidelines on not disparaging the company or its clients.

Official Social Media Management: Rules for employees authorised to manage official company accounts, including content approval procedures, response templates, and escalation paths for complaints and crisis situations.

Confidentiality and Insider Information: Explicit prohibition on sharing confidential business information, trade secrets, or (for listed companies) unpublished price-sensitive information through social media.

Harassment and Discrimination: Prohibition on using social media to harass, bully, or discriminate against colleagues, customers, or other individuals — with cross-reference to the POSH Policy and Code of Conduct.

Copyright and Intellectual Property: Guidelines on sharing third-party content, using the company's brand assets, and attributing sources correctly to avoid copyright infringement under the Copyright Act 1957.

Privacy and DPDPA Compliance: Requirements to obtain consent before sharing personal data or images of identifiable individuals, consistent with the DPDPA 2023.

Media Relations: Procedure for referring media and analyst enquiries received via social media to the designated communications contact.

Enforcement: Statement that violations may result in disciplinary action up to termination, consistent with the company's disciplinary procedure.

Additional compliance elements for a Social Media Policy (India) used in India include: Under Indian law, the Indian Contract Act 1872 governs contractual obligations, with Section 10 setting essential requirements for valid agreements. The Companies Act 2013 regulates corporate entities through the Registrar of Companies (ROC) and Ministry of Corporate Affairs (MCA). The Industrial Disputes Act 1947 and state labour commissioners govern employment disputes. The Information Technology Act 2000 and IT (Reasonable Security Practices) Rules 2011 protect personal data. The Income Tax Act 1961 and Goods and Services Tax Act 2017 govern tax obligations through the Central Board of Direct Taxes (CBDT) and GST Council. Forms-legal.com provides this template as a starting point for India-compliant documentation.