protection your business needs
Employees posting about your company, clients, or colleagues — even on personal accounts outside work hours — can create serious legal and reputational risks without a clear social media policy. We draft policies that define what's prohibited, protect your reputation, ensure POPIA compliance, and give you enforceable grounds to act when things go wrong.
no copy-paste templates
We develop the complete range of HR policies your business needs — disciplinary codes, leave policies, grievance procedures, performance management frameworks, remote work policies, confidentiality agreements, and employee handbooks — each built specifically for your operations, not copied from generic templates.
policies that actually work
A policy no one knows about is a policy that can't be enforced. We manage policy implementation — conducting awareness sessions, obtaining written acknowledgements, and training managers to apply policies consistently. South African courts require that employees knew the rules. We make sure they do.
Social media and online conduct — Acceptable social media use during work hours, what can/cannot be posted about the company, clients, colleagues, or work matters, confidentiality obligations, disclaimer requirements ("views are my own"), consequences for defamatory or discriminatory posts, and monitoring practices .
Reputation and brand protection — Rules about representing the company online, speaking to media, making public comments about competitors or industry matters, and protecting the company's public image .
Confidentiality and data protection — What information is confidential, POPIA compliance obligations, prohibitions on sharing customer data or internal information online, and photo/video sharing restrictions .
Technology and device use — Acceptable use of company devices, internet access during work hours, personal device use (BYOD), email and messaging standards, and monitoring of electronic communications .
Remote work and flexible work — Expectations for remote workers, working hours, availability, communication standards, home office safety, and data security when working from home .
Harassment and discrimination — Definitions of harassment (including online harassment), reporting procedures, investigation processes, and protections for complainants .
Whistleblowing and protected disclosures — How employees can safely report misconduct, protections against retaliation, and proper channels for raising concerns .
Traditional workplace standards — Disciplinary codes, grievance procedures, leave policies, performance management, dress codes, timekeeping, substance abuse, health and safety, and workplace conduct .
Written and accessible — Policies must be in writing, not just verbal instructions or "the way we've always done things"
Communicated effectively — Employees must be informed about policies through induction, training, signed acknowledgments, or regular reminders
Linked to business operations — Every policy must serve a legitimate business purpose (safety, efficiency, harmony, reputation protection, legal compliance)—you can't create arbitrary rules
Consistently applied — You must enforce policies the same way for everyone. Inconsistency makes policies unenforceable
Reasonable and fair — Policies cannot be so strict they're unreasonable, and sanctions must be proportionate to the offense
Balanced with employee rights — Policies must protect company interests while respecting employees' constitutional rights to freedom of expression, privacy, and dignity
Comprehensive, legally compliant HR policies written for South African workplaces—covering modern issues like social media, reputation protection, and data privacy, not just leave and dress codes
Clear procedures eliminating ambiguity and "common sense" assumptions
Protection from reputational damage caused by employee social media posts
Enforceable rules for online conduct, confidentiality, and brand protection
Proof that employees were informed of rules—critical CCMA protection for social media and other dismissals
Consistent standards applied fairly across your organization
Certainty and clarity for managers and employees about expectations and consequences—online and offline
Reduced disputes because everyone knows the rules
Legal defensibility when enforcement is challenged
Small businesses in Gauteng and across South Africa with no formal HR policies relying on "common sense"
Companies that have dismissed employees for social media posts and lost CCMA cases because they had no written, communicated policy
Employers concerned about employees posting about the company, clients, or colleagues on social media
Businesses with outdated policies written before social media, remote work, and POPIA became major workplace issues
Growing companies needing to formalize rules as they scale beyond 10-20 employees
Organizations where managers apply rules inconsistently causing employee complaints
Private schools needing policies for educators, support staff, learners, and parents—including social media conduct policies
Businesses preparing for Department of Labour inspections or CCMA disputes
Companies implementing new workplace practices (remote work, flexible hours, social media engagement) and needing written policies
Employers worried about reputational damage from employee online conduct
Social media policies are essential, not optional — Employees who post about your company, clients, or colleagues on social media—even on personal accounts, outside work hours, on their own devices—can create massive legal and reputational risks for your business . Without a clear social media policy, you cannot discipline employees for posts that damage your reputation, breach confidentiality, or create hostile work environments .
Your reputation is on the line every time an employee posts online — South African courts have upheld dismissals for social media misconduct where employees posted defamatory, discriminatory, or confidential content online—even outside working hours—because the posts harmed the employer's reputation or workplace relationships . But only if the employer had a clear, communicated policy defining what's prohibited .
Confidentiality and POPIA compliance require policies — Employees sharing customer data, internal information, photos of products, or personal information about colleagues on social media can violate the Protection of Personal Information Act (POPIA), creating serious liability for you . Policies must explicitly prohibit this and explain the consequences .
You can be held liable for employee posts in certain circumstances — Under South Africa's "chain of publication" principle, if you associate with an offending post (e.g., on your company Facebook page, in a WhatsApp group where you're the admin, or where employees comment inappropriately), you can be held liable for the fallout . Policies protect you by setting clear standards for what employees can post on company platforms .
Freedom of expression has limits in the workplace — While employees have constitutional rights to freedom of expression and privacy, these rights are not absolute when posts harm the employer, breach confidentiality, discriminate, harass, or disrupt the workplace . But you can only enforce limits if they're clearly stated in a written, communicated policy
Common sense isn't a defense at the CCMA — Courts don't accept "everyone knows you can't post that" or "obviously you can't share confidential information" as proof employees knew the rules . You must prove the rule existed in writing, was communicated to employees, and they understood the consequences .
A rule must be lawful, valid, reasonable, AND known — The Labour Relations Act requires four things: the rule must be lawful (not illegal), valid (linked to business operations), reasonable (not arbitrary), and employees must be made aware of it . Miss any one and the rule is unenforceable .
Policies provide certainty and clarity for everyone — Without written policies, managers apply rules inconsistently, employees don't know what's expected, and disputes escalate because there's no clear standard . Policies eliminate guesswork and protect both employer and employee by making expectations clear .
Policies determine procedures for everything — From how to apply for leave, to how disciplinary hearings work, to what you can post on Facebook, policies provide step-by-step procedures ensuring fairness, consistency, and legal compliance .
You cannot change the rules mid-game — If you implement a new policy (like a social media policy) or change an existing standard, you must communicate it properly and give employees reasonable time to adjust . Simply posting a policy on a noticeboard isn't enough—you must ensure employees actually know about it
We know what makes policies enforceable — Our policies aren't just templates—they're designed to survive CCMA scrutiny with clear rules, communication proof, and consistent application guidelines .
We eliminate "common sense" assumptions — We make expectations explicit, document procedures, and ensure nothing is left to interpretation or guesswork—especially for complex areas like social media conduct and reputation protection .
We understand modern workplace risks — We don't just write policies about leave and dress codes. We address the issues causing problems in 2025: social media posts damaging reputations, confidentiality breaches online, remote work management, and POPIA compliance .
Legal expertise built in — Our owner is an admitted attorney. Every policy complies with South Africa's Labour Relations Act, BCEA, EEA, POPIA, and relevant case law—including recent social media dismissal cases .
We implement policies, not just write them — Policies only work if employees know about them. We build communication and acknowledgment systems ensuring rules are known—critical for enforcing social media and online conduct policies .
We focus on consistency — We train managers to apply policies the same way every time, avoiding precedents that undermine enforcement .
We keep you current — South African labour law and social media case law changed significantly in 2024 and 2025. We ensure your policies reflect the latest requirements
rules must be known and consistently applied.
The LRA requires that workplace rules are known to employees, or that employees could reasonably be expected to know them. You cannot dismiss an employee for breaking a rule they've never been told about. Written, communicated policies are your first line of defence.
confidentiality and data protection policies.
The Protection of Personal Information Act requires businesses to protect employee and customer data, obtain consent, and report breaches. Employees must be told what data is confidential and what sharing online can expose the company to liability. POPIA-compliant policies are essential.
Questions we hear from business owners about getting their HR policies right in South Africa.
OptiHR's service streamlined our compliance and boosted team morale.
Sarah JohnsonHR Director @ Tech Innovations SA
Exceptional expertise in labour law – saved us thousands in fines.
Michael BrownCEO @ Growth Corp
Book a free consultation and find out exactly where your business stands — no commitment, no pressure.