Social Media Policy

Social media offers the opportunity for people to gather in online communities of shared interest and to create, share, or consume content. riskfacilitator embraces social media as an important medium for business engagement and communication, and we actively encourage our people to contribute professional insight and thought leadership in the risk and safety field. This is valuable to the practice.

That value comes with responsibility. Because our work involves clients, incidents, investigations and regulatory matters, often in high-consequence and sometimes contested settings, the line between sharing insight and disclosing something that should not be public can be thin. This policy sets the expectations for any use of social media where a connection to riskfacilitator exists.

When this policy applies
Use of social media will be considered connected to riskfacilitator and covered by this policy if any of the following apply:

The social media account is established or used as an official riskfacilitator account
The platform is accessed using riskfacilitator IT systems or equipment
The staff member or contractor identifies themselves as associated with riskfacilitator
The content references riskfacilitator, its services, clients, projects, staff, or contractors

On professional networks such as LinkedIn, a person's affiliation with riskfacilitator is displayed by default and is effectively permanent. For that reason, any post touching on safety, risk, WHS, clients, incidents or industry matters should be treated as connected to riskfacilitator regardless of how it is framed, even where posted from a personal account. Genuinely personal content unrelated to the field remains a person's own. A "views are my own" disclaimer is encouraged where relevant, but offers limited protection where the content overlaps with the firm's actual business.

Confidentiality and client work
This is the most important obligation in this policy.
Much of our work is undertaken for clients under conditions of confidence. Before posting anything drawn from, or adjacent to, client work, assume that the client, any relevant regulator, and opposing counsel will read it.

Do not reference live engagements, clients, projects, incidents, investigations or regulatory matters without the client's express agreement.
Do not assume de-identification makes a post safe. Where the underlying event is public or known within an industry, removing names often does not prevent the matter being identified.
Do not disclose confidential or personal information gained through work with riskfacilitator, including information about clients, their people, their operations or their incidents.
If you are unsure whether something can be posted, do not post it. Ask first.

Incidents, investigations and regulatory matters
Commentary on incidents, accidents, investigations or regulatory matters carries specific legal and reputational risk, even where the matter is already public and even where no client is named.
Such content can be discoverable in proceedings, can be read as the firm's formal position, and can cut against the interests of a client or a party we may later act for. Before posting any commentary of this kind, consider whether any related matter may be live or contested. Where there is any doubt, check before posting. This is not a restriction on legitimate thought leadership, which we encourage; it is a check on the narrow subset of content that carries real consequence.

Official accounts and oversight

All official riskfacilitator accounts on platforms such as LinkedIn, Instagram, TikTok, and X must be approved and authorised by riskfacilitator.
Unauthorised use of the riskfacilitator name, logo, or likeness in social media accounts is subject to review and may be amended or removed.
Content owners are responsible for monitoring and maintaining any official web or social media content.
All official accounts must clearly identify themselves as maintained by riskfacilitator and include appropriate contact details.

Conduct and content expectations
Employees and contractors representing riskfacilitator on social media must clearly identify themselves as affiliated with riskfacilitator, use approved organisational accounts where applicable, and act professionally and respectfully at all times.
The following must not be published on any social media platform connected to riskfacilitator. The first items carry the most serious consequences for the firm and its clients:

Confidential or personal information gained through work with riskfacilitator
Content concerning live or contested incidents, investigations or regulatory matters, except as permitted above
Defamatory statements
Misleading, deceptive, or false information
Breaches of copyright, intellectual property, or legal ownership rights
Use of riskfacilitator branding without prior approval
Discriminatory or hateful content on any grounds protected under law
Harassment, bullying, intimidation, or threats
Sexual, pornographic, profane, offensive or obscene material, including links
Content creating or contributing to unsafe or unhealthy workplace conditions
Content compromising the security or safety of individuals or systems
Encouragement of unlawful behaviour
Commercial solicitations not authorised by riskfacilitator
Unauthorised posts not approved by designated content managers
Unreasonable or excessive personal use that affects productivity or duty of care

Good practice
We want our people to build their professional profiles and contribute to the field. Within the boundaries above, you are encouraged to share general insight, commentary on published research and standards, reflections on safety thinking, and content that builds the firm's reputation for considered, modern risk and safety practice. When in doubt about whether something crosses a line, the safest and fastest course is to ask before posting.

Enforcement
riskfacilitator reserves the right to monitor, restrict, or remove any content or activity that violates this policy, to the extent permitted by applicable workplace and surveillance laws.

This policy is to be read alongside riskfacilitator's Terms & Privacy Policy, and relevant employment or contractor agreements. For contractors, this policy applies where it is incorporated into the relevant contractor agreement.

Last updated: 28 June 2026