Social media has become the public square of the 21st century — but the legal rules governing what you can say, what platforms can do with your content, and what rights you have when things go wrong are still evolving rapidly. This guide explains the core legal principles every social media user should understand.
Defamation on Social Media
Defamation is a false statement of fact communicated to a third party that damages someone's reputation. When published in written or recorded form (including social media posts, tweets, or videos), it is called libel. When spoken aloud, it is called slander.
To win a defamation lawsuit, a plaintiff must generally prove:
- The defendant made a false statement of fact (not opinion);
- The statement was published (communicated to at least one person other than the subject);
- The statement was made with the required level of fault; and
- The statement caused actual harm.
Public Figures vs. Private Individuals
The standard of fault is different depending on who was defamed. Under New York Times Co. v. Sullivan (1964) and its progeny, public figures (politicians, celebrities, executives who have voluntarily entered public life) must prove "actual malice" — meaning the defendant knew the statement was false or acted with reckless disregard for its truth or falsity. This is a very high bar. Private individuals generally only need to prove negligence, a much easier standard.
Importantly, pure opinions are protected by the First Amendment. Calling someone a "terrible person" or saying "I think he is dishonest" is generally opinion, not a statement of fact. But claiming "John Smith stole $5,000 from me" is an actionable statement of fact if false.
Terms of Service: What Platforms Can and Cannot Do
When you create an account on any social media platform, you agree to its Terms of Service (ToS) — a contract between you and the company. These agreements are lengthy and often unfavorable to users, but understanding them is essential.
Most platforms claim a broad, royalty-free license to use your content — but this license is typically limited. Major platforms generally cannot sell your photos or posts outright to third parties for their own commercial use. What they can do includes displaying your content to other users, using content in algorithmic feeds and recommendations, and using content to train recommendation systems.
Platforms are private companies, not government actors. They have broad discretion to moderate content, enforce community standards, suspend accounts, and remove posts. The First Amendment only restricts government censorship, not private platform decisions.
Employer Monitoring of Social Media
Employers have significant — but not unlimited — rights to monitor employee social media activity. The general rule: anything you post publicly is fair game for employer review. Private accounts with strong privacy settings offer more protection, but are not absolute.
Key legal boundaries on employer social media monitoring:
- Many states prohibit demanding passwords: Over 25 states have laws prohibiting employers from demanding your social media login credentials as a condition of employment or continued employment.
- NLRA protection for concerted activity: The National Labor Relations Act protects employees' rights to engage in "concerted activity" — discussing wages, working conditions, and organizing collectively. An employer cannot fire you for a social media post in which you and a colleague discuss pay disparities or complain about workplace conditions, even on a public platform. This protection applies to most private-sector employees.
- At-will employment limits: In most states, employers can fire at-will employees for social media posts that embarrass the company, reveal confidential information, or violate workplace policies — provided those posts are not protected by the NLRA or anti-discrimination laws.
Copyright in Social Media Posts
You own the copyright to original photos, videos, and written posts you create and share on social media. The copyright vests in you automatically upon creation. The platform receives only the license you grant through the ToS.
| Content Type | Who Owns the Copyright? |
|---|---|
| Photo you took and posted | You (photographer) |
| Video you filmed and uploaded | You (creator) |
| Post containing someone else's photo | Original photographer — you may be infringing |
| Meme using copyrighted image | Original image owner — fair use may apply |
| Content created for employer on the job | Employer (work for hire) |
Sharing (retweeting, reposting) content is not necessarily infringement if the platform's design facilitates it, but downloading and re-uploading someone else's photo or video without permission may be. When in doubt, link rather than copy.
Section 230 Immunity for Platforms
Section 230 of the Communications Decency Act (47 U.S.C. § 230) is one of the most consequential laws governing the internet. It provides that online platforms are not treated as the publisher or speaker of information provided by third-party users. In plain language: if a user posts defamatory content on Twitter, Twitter is not liable for that defamation — only the individual user who posted it is.
Section 230 also protects platforms when they make good-faith moderation decisions to restrict access to content they find objectionable, even if that moderation is imperfect or inconsistent. This is why platforms can ban users, remove posts, and add warning labels without becoming legally liable for the underlying content.
Section 230 does not protect platforms from federal criminal law violations, intellectual property claims, or sex trafficking liability (after FOSTA-SESTA). It has been under increasing scrutiny from both political parties and its scope may change through legislation or court decisions.
Right to Be Forgotten and Deplatforming
The European Union's General Data Protection Regulation (GDPR) includes a "right to erasure" — allowing individuals to request deletion of their personal data in certain circumstances. No comparable federal right exists in the United States, though some state laws (like California's CCPA) provide limited data deletion rights for California residents.
If a platform bans your account, you generally have no legal right to reinstatement in the United States. Platforms are private actors and can terminate accounts for violating their ToS. Your remedies are typically limited to internal appeals processes and, in egregious cases, claims based on the platform's own contract with you. Some public figures have had more success challenging deplatforming through state laws that restrict social media censorship, though these laws face ongoing constitutional challenges.