Employer Access to Employee Personal Social Media Accounts in California

Short answer California bars an employer from requesting personal social media credentials, requiring a worker or applicant to open the account in its presence, or demanding disclosure of personal social media. An employer may request an employee to divulge material reasonably believed relevant to a qualifying misconduct or legal-compliance investigation, solely for that investigation or a related proceeding.
State
California
Statute checked
October 17, 2026
Sources
3 statutes

Not sure how this applies to you? Ask about your own facts and see which parts of current California law apply, with citations to the statutes.

Free for 7 days, then $249/mo. Cancel anytime.

At a glance

Governing law and covered accountsLabor Code § 980 covers personal social media; its broad social-media definition includes electronic accounts and content such as messages and email (§ 980(a)–(b)).
Covered employers, employees, and applicantsThe access ban names employers, employees, and employment applicants; § 980 states no employer-size threshold or express public-employer carveout (§ 980(b), (e)).
Credential and observed-access demandsEmployer may not request or require a username/password for personal social media, access in its presence, or disclosure of personal social media (§ 980(b)(1)–(3)).
Contact and privacy-setting demandsSection 980 has no separate contact-addition or privacy-setting clause; its express prohibitions concern credentials, observed access, and divulging personal social media (§ 980(b)).
Refusal, retaliation, and hiringEmployer may not discharge, discipline, threaten either, or otherwise retaliate for refusing a demand that violates § 980; otherwise lawful adverse action remains possible (§ 980(e)).
Investigation and specific-content routeEmployer may request an employee to divulge personal social media reasonably believed relevant to alleged misconduct or legal/regulatory violation; use is limited to the investigation or related proceeding (§ 980(c)).
Employer accounts, public content, and regulated workEmployer may seek a login method for an employer-issued electronic device (§ 980(d)); § 980 states no separate public-content, regulated-work, or law-enforcement-screening exception.
Inadvertently received credentials and useSection 980 gives no specific inadvertent-receipt or later-use rule; the listed rules address employer requests, access, disclosure, and retaliation (§ 980(b)–(e)).
Enforcement and remediesSection 980(e) prohibits retaliation, but § 980 itself names no dedicated complaint forum, damages, penalty, injunction, or attorney-fee remedy.

Requirements one by one

Account access and disclosure

Labor Code § 980(b) says an employer shall not require or request an employee or applicant to “Access personal social media in the presence of the employer.” The same subsection reaches usernames and passwords sought to access personal social media and requests to divulge that media. The definition in § 980(a) includes messages and email as examples of electronic content; the prohibition still concerns personal social media.

Investigation requests

Section 980(c) preserves an employer's existing ability to request relevant material from an employee during an investigation of alleged misconduct or a violation of applicable law or regulation. It requires use “solely for purposes of that investigation or a related proceeding.” A request for the identified material under this route differs from a general demand to log in or surrender a password.

Employer-issued devices and refusal

Section 980(d) permits seeking credentials or another access method for an employer-issued electronic device. Section 980(e) protects an employee or applicant who refuses a demand that violates § 980 from the listed retaliation; it expressly preserves adverse action otherwise permitted by law.

What trips people up

  • A disclosure request can be covered. The prohibition reaches demands to divulge personal social media, even without asking for a password (§ 980(b)(3)).
  • The investigation route is purpose-limited. The employer must reasonably believe the material is relevant to the specified investigation and limit its use to that investigation or a related proceeding (§ 980(c)).
  • A device is distinct from personal social media. The exception in § 980(d) refers to access to an employer-issued electronic device.

Common questions

Does the rule expressly bar forced contacts or changes to privacy settings? Section 980 does not name either demand separately. Its express access and disclosure prohibitions still control a request within their terms.

Does § 980 establish a specific damages award or complaint agency? No such mechanism appears in § 980. It states the prohibited requests, investigation and device provisions, and retaliation rule; other applicable law may affect enforcement.

Statutes and sources

  • Cal. Labor Code § 980: personal social media access, investigation, employer-issued device, and retaliation; accessed 2026-10-17.

Source links

Every statute quoted above, linked, with the date we checked it.

Cal. Lab. Code § 980(a)–(b) · accessed 2026-10-17
Cal. Lab. Code § 980(c) · accessed 2026-10-17
Cal. Lab. Code § 980(d)–(e) · accessed 2026-10-17
This page summarizes state-law limits on employer access to personal social media accounts. Other employment, privacy, federal, and workplace rules may apply to a particular account or investigation; this is general information, not legal advice.

What does California law mean for your facts?

You just read the general rule. Ask your own question and see which parts of current California law apply to your situation, with citations you can check.

Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.

  • Starts from the statutes this survey is built on
  • Cites every source it relies on, so you can verify it
  • Chat, drafting and research in one workspace