Employer Access to Employee Personal Social Media Accounts in Vermont

Short answer Vermont bars an employer from requesting or requiring account credentials, an unlocked device for account access, an observed login, account content, or wider privacy settings. It allows requests for specifically identified content for listed legal duties and investigations, and gives law enforcement agencies broader screening and fitness exceptions.
State
Vermont
Statute checked
October 17, 2026
Sources
4 statutes

Not sure how this applies to you? Ask about your own facts and see which parts of current Vermont law apply, with citations to the statutes.

Free for 7 days, then $249/mo. Cancel anytime.

At a glance

Governing law and covered accounts21 V.S.A. § 495l covers social-media accounts used to create, share, or interact with content, including messages and email; employer-provided or primarily employer-use accounts are excluded (§ 495l(a)(1)).
Covered employers, employees, and applicantsEmployers with one or more Vermont service providers, including governmental bodies and agents, are covered; § 495l protects employees and applicants (§§ 495d(1)–(2), 495l(b)).
Credential and observed-access demandsNo required, requested, or coerced credentials, unlocked personal device for account access, employer-observed login, or account-content presentation (§ 495l(b)(1)–(3)).
Contact and privacy-setting demandsNo required or coerced new contact; no required, requested, or coerced setting change that expands third-party access (§ 495l(b)(4), (c)).
Refusal, retaliation, and hiringNo discharge or other retaliation against an employee exercising these rights; the demand bans also cover applicants, but § 495l states no separate refusal-to-hire clause (§ 495l(b), (g)).
Investigation and specific-content routeEmployer may request specifically identified content for legal/regulatory compliance or specified disclosure, harassment, violence, or discriminatory-content investigations; credentials are excluded from that content (§ 495l(a)(2), (e)(1)).
Employer accounts, public content, and regulated workEmployer-provided or primarily work-use accounts are excluded; law-enforcement agencies have applicant screening and employee fitness/investigation access exceptions; employer-device credentials and legal compliance remain available (§ 495l(a)(1), (e)(2)–(4), (f)).
Inadvertently received credentials and useSection 495l states no separate accidental-credential procedure; its access-demand ban and listed exceptions remain the stated rule (§ 495l).
Enforcement and remediesAttorney General or State’s Attorney may enforce; an aggrieved person may sue in Superior Court for damages or equitable relief, including costs and reasonable attorney fees (§§ 495l(g), 495b(a)–(b)).

Requirements one by one

Credential and observed access demands

Section 495l(b) reaches both a password request and a demand to hand over an unlocked personal device for account access. It also bars requiring an applicant to open the account in an employer's presence or present its content. An employee cannot waive these rights by agreement (§ 495l(d)).

Investigation and specific content

“Specifically identified content” must be particular enough to distinguish the sought item from other account material and cannot be a username, password, or other account authentication method. Section 495l(e)(1) permits an employer to request that content for legal or regulatory compliance, an alleged leak of proprietary, confidential, or financial data, or alleged unlawful harassment, workplace threats, or discriminatory or disparaging content about another employee.

Exceptions and remedies

A law enforcement agency may request or require applicant account access for hiring screening or fitness, and employee access for continued fitness or specified misconduct, policy, or law inquiries (§ 495l(e)(2)). The Attorney General or a State's Attorney may seek enforcement, and an aggrieved person may bring a Superior Court action for compensatory or punitive damages or equitable relief (§ 495b(a)–(b)).

What trips people up

The contact rule bars requiring or coercing a new contact; the privacy-setting rule also bars a request to widen third-party access (§ 495l(b)(4), (c)). Section 495l(g) expressly bars retaliation against an employee exercising these rights; the statute does not separately spell out an applicant refusal-to-hire clause.

Common questions

Can an employer ask me to show one post during an investigation? It may request specifically identified content for one of the purposes in § 495l(e)(1). That route does not include credentials.

Can my employer ask for the password to its own device? Yes, when the username or password is necessary to access an employer-issued electronic device (§ 495l(f)).

Statutes and sources

  • 21 V.S.A. § 495l(a)–(g), current official text, accessed 2026-10-17. Verbatim text is recorded in the statute field above.
  • 21 V.S.A. § 495d(1)–(2), current official text, accessed 2026-10-17. Verbatim definitions are recorded above.
  • 21 V.S.A. § 495(a)(8), current official text, accessed 2026-10-17. Verbatim retaliation text is recorded above.
  • 21 V.S.A. § 495b(a)–(b), current official text, accessed 2026-10-17. Verbatim enforcement text is recorded above.

Source links

Every statute quoted above, linked, with the date we checked it.

21 V.S.A. § 495l(a)–(g) · accessed 2026-10-17
21 V.S.A. § 495d(1)–(2) · accessed 2026-10-17
21 V.S.A. § 495(a)(8) · accessed 2026-10-17
21 V.S.A. § 495b(a)–(b) · accessed 2026-10-17
This page summarizes state-law limits on employer access to personal social media accounts. Other employment, privacy, federal, and workplace rules may apply to a particular account or investigation; this is general information, not legal advice.

What does Vermont law mean for your facts?

You just read the general rule. Ask your own question and see which parts of current Vermont law apply to your situation, with citations you can check.

Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.

  • Starts from the statutes this survey is built on
  • Cites every source it relies on, so you can verify it
  • Chat, drafting and research in one workspace