Employer Access to Employee Personal Social Media Accounts in Maine

Short answer Maine bars employers from asking employees or applicants for personal social-media access credentials or an observed login and from requiring account information, new contacts, or wider privacy settings. During a qualifying workplace investigation, an employer may require relevant account information only for that investigation or a related proceeding.
State
Maine
Statute checked
October 17, 2026
Sources
5 statutes

Not sure how this applies to you? Ask about your own facts and see which parts of current Maine law apply, with citations to the statutes.

Free for 7 days, then $249/mo. Cancel anytime.

At a glance

Governing law and covered accounts26 M.R.S. §§ 615–619 covers user-generated-content accounts, including messages, email, and online services; employer-opened, employer-provided, or primarily employer-use accounts are excluded (§ 615(4)).
Covered employers, employees, and applicantsEmployers include the State, political subdivisions, and direct/indirect agents; current paid workers and job applicants are covered (§ 615(1)–(3)).
Credential and observed-access demandsEmployer may not require, coerce, or request a password/other access means or an account login in its presence; it also may not require/coerce disclosure of personal-account information (§ 616(1)–(3)).
Contact and privacy-setting demandsEmployer may not require/cause adding anyone to account contacts or require/cause/request changes affecting third-party content visibility (§ 616(4)–(5)).
Refusal, retaliation, and hiringNo discharge, discipline, other penalty, or threat against an employee for refusing listed demands; no failure or refusal to hire an applicant for that refusal (§ 616(6)–(7)).
Investigation and specific-content routeEmployer may require reasonably relevant personal-account information for an employee-misconduct or workplace-law investigation if otherwise lawful, using it only as needed for the investigation/related proceeding (§ 617(3)).
Employer accounts, public content, and regulated workPublicly available information, legally required financial/insurance/securities screening or monitoring, and employer-equipment/software/email policies and access remain (§§ 617(1)–(2), 618).
Inadvertently received credentials and useThe employee social-media subchapter states no separate accidental-credential receipt or use procedure (§§ 615–619).
Enforcement and remediesDepartment of Labor fine: at least $100 first violation, $250 second, and $500 each later violation (§ 619).

Requirements one by one

Demands and refusal

26 M.R.S. § 615(1) defines an applicant; subsection (4) defines a covered account broadly enough to include messages, email, and online services, but excludes accounts opened at the employer's request, provided by it, or intended primarily for its use. 26 M.R.S. § 616(1) bars password requests; the rest of § 616 bars observed-login requests, compelled account-information disclosure, contact additions, and visibility changes. It separately protects an employee against penalties and an applicant against a refusal to hire for declining the listed demands.

Investigation exception

Under § 617(3), an employer may require an employee to disclose account information reasonably believed relevant to an alleged employee-misconduct or workplace-law investigation, if the demand is otherwise lawful. The employer may access and use the information only as necessary for that investigation or a related proceeding.

Fines

Section 619 sets Department of Labor fines at not less than $100 for the first violation, $250 for the second, and $500 for each later one.

What trips people up

  • A work account is outside the definition. Section 615(4) excludes an employer-opened, employer-provided, or primarily employer-use account; § 618 also preserves access requirements for employer devices and software.
  • The investigation route is about an employee. Section 617(3) names an employee and ties use to the investigation or related proceeding.

Common questions

May an employer use public posts? 26 M.R.S. § 617(1) leaves publicly available information outside the subchapter's restriction.

Can regulated firms carry out required screening? Section 617(2) preserves the specified legal or self-regulatory screening and communications supervision duties to the extent necessary for the listed regulated businesses.

Does the statute set an accidental-password rule? The employee social-media provisions in §§ 615–619 contain no separate inadvertent-receipt procedure.

Statutes and sources

Source links

Every statute quoted above, linked, with the date we checked it.

26 M.R.S. § 615(1)–(4) · accessed 2026-10-17
26 M.R.S. § 616(1)–(7) · accessed 2026-10-17
26 M.R.S. § 617(1)–(3) · accessed 2026-10-17
26 M.R.S. § 618 · accessed 2026-10-17
26 M.R.S. § 619 · accessed 2026-10-17
This page summarizes state-law limits on employer access to personal social media accounts. Other employment, privacy, federal, and workplace rules may apply to a particular account or investigation; this is general information, not legal advice.

What does Maine law mean for your facts?

You just read the general rule. Ask your own question and see which parts of current Maine law apply to your situation, with citations you can check.

Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.

  • Starts from the statutes this survey is built on
  • Cites every source it relies on, so you can verify it
  • Chat, drafting and research in one workspace