Employer Access to Employee Personal Social Media Accounts in Oregon
Not sure how this applies to you? Ask about your own facts and see which parts of current Oregon law apply, with citations to the statutes.
Free for 7 days, then $249/mo. Cancel anytime.
At a glance
| Governing law and covered accounts | ORS 659A.330(8) covers social-media accounts used exclusively for personal purposes, unrelated to employer business, and neither supplied nor paid for by the employer. |
|---|---|
| Covered employers, employees, and applicants | Employees and applicants are covered; Chapter 659A's employer definition reaches one or more employees and public bodies, but § 659A.330(7) excludes law-enforcement units. |
| Credential and observed-access demands | No request or requirement to establish an account or disclose/provide authentication access; no compelled private-content display in employer's presence except reported content under the investigation clause (§ 659A.330(1)(a), (d), (4)(b)). |
| Contact and privacy-setting demands | No compelled addition of employer or employment agency to social-media contacts; § 659A.330(1)(c) states the contact rule. |
| Refusal, retaliation, and hiring | No employee penalty or threat, or applicant hiring refusal, for declining the enumerated account, credential, contact, or observed-display demands (§ 659A.330(1)(e)–(f)). |
| Investigation and specific-content route | After specific information about account activity, employer may investigate legal/regulatory compliance or work misconduct and require reported content necessary for a factual finding, without authentication information (§ 659A.330(4)(a)–(b)). |
| Employer accounts, public content, and regulated work | Employer-provided/work accounts, public information, and legal or self-regulatory compliance are preserved; law-enforcement units are excluded (§ 659A.330(2), (4)(c), (5), (7)). |
| Inadvertently received credentials and use | Accidental receipt through network/device monitoring creates no liability for possession, but employer may not use the credentials to enter the account (§ 659A.330(6)). |
| Enforcement and remedies | Aggrieved person may file a verified labor-bureau complaint within one year; after hearing, commissioner may order cessation, equitable relief, and actual damages (§§ 659A.820(2), 659A.850(4)). |
Requirements one by one
Account access and contacts
ORS 659A.330(1)(a) bars requests to establish a personal account or to disclose its authentication information. Subsections (1)(c) and (d) bar compelled social-media contacts and showing otherwise private account content while the employer watches. Subsection (1)(b) also bars a demand to let the employer advertise on the personal account.
Refusal and investigation
Section 659A.330(1)(e)–(f) protects an employee against penalties or threats and an applicant against hiring refusal for declining the listed demands. Under subsection (4), specific information about account activity permits a defined compliance or misconduct investigation. The employer may seek the reported content needed to determine facts without taking login information.
Exceptions and remedy
Section 659A.330(2) permits credentials for an employer-provided or work account. Subsections (5)–(7) address public information, accidentally received credentials, and the exclusion for law-enforcement units. An aggrieved person may file a verified complaint with the Commissioner of the Bureau of Labor and Industries within one year under § 659A.820(2). Section 659A.850(4) permits a cease-and-desist order and relief that includes actual damages after a hearing.
What trips people up
- Observed display is expressly covered. Section 659A.330(1)(d) separately addresses a demand to open the account in the employer's presence.
- Accidental receipt does not authorize login. Subsection (6) allows possession of inadvertently obtained credentials but bars their use to enter the account.
Common questions
Can an employer review a public post? Section 659A.330(5) preserves access to information available to the public.
Can it investigate reported private content? Section 659A.330(4)(b) permits the stated reported-content request without authentication information.
Does the rule cover police employers? Section 659A.330(7) excludes employers that are law-enforcement units.
Statutes and sources
- ORS 659A.001, 659A.330, 659A.820 and 659A.850: current official chapter text; accessed 2026-10-17.
Source links
Every statute quoted above, linked, with the date we checked it.
What does Oregon law mean for your facts?
You just read the general rule. Ask your own question and see which parts of current Oregon law apply to your situation, with citations you can check.
Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.
- Starts from the statutes this survey is built on
- Cites every source it relies on, so you can verify it
- Chat, drafting and research in one workspace