Employee Advocacy: Disclosure and Review Before Publishing

An employee advocacy programme needs clear rules about what people may share, how they disclose their relationship and who reviews sensitive material. An AI writer or approval button does not establish legal compliance.

This guide covers a few practical review questions, with US sources where specified. Requirements vary by jurisdiction, industry and the communication itself; have the responsible legal or compliance owner define your programme's rules.

Make the employment relationship clear

The US FTC endorsement guidance explains that endorsements must be honest and that a material relationship should be clearly disclosed when the audience would not expect it. Do not assume a job title on a separate profile will make the relationship apparent to everyone seeing a post.

An illustrative opening is: “I work on the product team at ExampleCo. Here is the approval problem we designed this feature to address.” The disclosure should be easy to notice in the actual context of the post. It does not make an unsupported performance claim acceptable.

Build a review brief for each post

Removing a name is not sufficient if the remaining details identify a customer. A fictional example can teach a process, but label it and do not present it as a customer result.

Separate participation from data processing

Make it possible to decline public posting without a performance penalty. Separately, ask the privacy owner to document what employee information the programme collects, why, who can see it and how long it is retained. Do not assume that agreeing to join a programme resolves every data-processing requirement. The EDPB consent guidelines are a starting reference for EU consent questions, not a programme certification.

Escalate regulated communications

For FINRA member firms, Notice 17-18 discusses recordkeeping and supervision of business communications. The content of a communication matters; using a personal device or social account does not automatically remove obligations. Do not reduce the rules to “all posts need preapproval” or “educational posts are exempt.” Have the firm's compliance owner specify the applicable process.

Prepare the correction path

Before launch, name the person who can pause scheduled posts, investigate a disputed claim and coordinate corrections. Test that process with a harmless draft. Retain records according to the applicable policy; do not promise automatic deletion where retention duties may apply.