Employer Access to Employee Personal Social Media Accounts in Hawaii
Not sure how this applies to you? Ask about your own facts and see which parts of current Hawaii law apply, with citations to the statutes.
Free for 7 days, then $249/mo. Cancel anytime.
At a glance
| Governing law and covered accounts | Haw. Rev. Stat. ch. 487G covers login-protected personal online accounts, including social media and email; employer-opened/provided accounts or discrete portions intended mainly for employer use are excluded (§ 487G-2). |
|---|---|
| Covered employers, employees, and applicants | Employee includes current workers, prospective workers expressing interest or applying, unpaid interns, and independent contractors; employer includes agents, and 'person' includes government entities (§ 487G-2). |
| Credential and observed-access demands | Employer may not require, coerce, or request login information, account access in its presence that exposes login/content, or an unlocked personal device for account access (§ 487G-3(a)(1)(A), (D)–(E)). |
| Contact and privacy-setting demands | Employer may not demand wider account settings; it may ask without coercion to be added/retained as a content viewer only with a clear statement that consent is voluntary and unnecessary (§ 487G-3(a)(1)(B)–(C)). |
| Refusal, retaliation, and hiring | Employer may not take or threaten adverse action for refusing a prohibited demand or the voluntary content-viewer request; prospective employees are within 'employee' (§§ 487G-2, 487G-3(a)(2)). |
| Investigation and specific-content route | Without login credentials, employer may seek specifically identified content for its legal duties, fact-based misconduct/confidentiality inquiry, or safety threats; it may view only shared content, use it only for that purpose, and not alter it (§ 487G-3(b)(4), (c)). |
| Employer accounts, public content, and regulated work | Public information, federal/state law or court orders, statutory self-regulatory rules, employer-device policies, and discrimination/harassment investigation duties remain (§ 487G-3(b)(1)–(3), (e)). |
| Inadvertently received credentials and use | Lawful network/device monitoring receipt alone creates no Act liability; employer must secure, not use/share, and dispose of credentials promptly, with stated investigation/litigation retention exceptions (§ 487G-3(d)). |
| Enforcement and remedies | Attorney general may sue in district court for equitable relief and up to $1,000 per violation/$100,000 per event; employee may sue for equitable relief, actual/general damages, costs, and reasonable fees (§ 487G-5). |
Requirements one by one
Account demands and consent
Haw. Rev. Stat. § 487G-3(a) prohibits login and content demands, observed account access, wider settings, and surrender of an unlocked personal device for account access. Section 487G-2 includes prospective workers, interns, and independent contractors within “employee” and covers login-protected email as well as social-media accounts. A request to add or retain the employer as a content viewer must be voluntary, uncoerced, and accompanied by a clear statement that acceptance is not required.
Specific content and use
Section 487G-3(b)(4) permits a request for specifically identified content without login information for listed legal duties, fact-based investigations, or safety threats. Under § 487G-3(c), an employer receiving content through that route may not view unshared material, repurpose the shared content, or alter it.
Civil remedies
Section 487G-5 permits a district-court action by the attorney general and a separate employee action. A prevailing attorney general may obtain equitable relief and a civil penalty up to $1,000 per violation, capped at $100,000 for violations caused by the same event; a prevailing employee may obtain equitable relief, actual and general damages, costs, and reasonable fees.
What trips people up
- Content must be particular. Section 487G-2 requires identifying discrete pieces of content with enough detail to distinguish them from a substantial share of other account material; § 487G-3(b)(4) does not allow an open-ended account search.
- Monitoring receipt is not free use. Under § 487G-3(d), lawful security monitoring that captures login information excuses possession alone, while secure handling, no use or sharing, and prompt disposal still apply.
- Workplace policies remain. Section 487G-3(b)(3) preserves policies for employer devices and employee-owned devices used for business.
Common questions
Does the law cover a public employer? Section 487G-2 defines “person” to include government agencies and subdivisions, and uses that term in the employer definition.
May an employer see a public post? Yes. Section 487G-3(b)(1) preserves access to publicly available information.
Can an employee be penalized for declining a voluntary viewer request? No. Section 487G-3(a)(2)(B) prohibits adverse action or threats over declining that request.
Statutes and sources
- Haw. Rev. Stat. § 487G-2: definitions; accessed 2026-10-17.
- Haw. Rev. Stat. § 487G-3: employer demands, exceptions, and accidental-login safeguards; accessed 2026-10-17.
- Haw. Rev. Stat. § 487G-5: civil actions and relief; accessed 2026-10-17.
Source links
Every statute quoted above, linked, with the date we checked it.
What does Hawaii law mean for your facts?
You just read the general rule. Ask your own question and see which parts of current Hawaii law apply to your situation, with citations you can check.
Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.
- Starts from the statutes this survey is built on
- Cites every source it relies on, so you can verify it
- Chat, drafting and research in one workspace