Employer Access to Employee Personal Social Media Accounts in West Virginia

Short answer West Virginia bars an employer from demanding access credentials, making an employee or applicant open a personal social-network account in its presence, or compelling the addition of the employer or an employment agency as a contact. Specific-content requests and investigations have the limited routes stated in § 21-5H-1.
State
West Virginia
Statute checked
October 17, 2026
Sources
3 statutes

Not sure how this applies to you? Ask about your own facts and see which parts of current West Virginia law apply, with citations to the statutes.

Free for 7 days, then $249/mo. Cancel anytime.

At a glance

Governing law and covered accountsW. Va. Code § 21-5H-1 covers an account, service, or profile on a social networking website used exclusively for personal communications unrelated to the employer's business (§ 21-5H-1(e)).
Covered employers, employees, and applicantsThe prohibition names an employer's demands to an employee or potential employee; § 21-5H-1 gives no special public-employer definition (§ 21-5H-1(a), (e)).
Credential and observed-access demandsEmployer may not request, require, or coerce disclosure of authentication information or an account login in its presence (§ 21-5H-1(a)(1)–(2)).
Contact and privacy-setting demandsEmployer may not compel adding itself or an employment agency to access-enabling contacts; § 21-5H-1 does not separately name privacy-setting changes (§ 21-5H-1(a)(3)).
Refusal, retaliation, and hiring§ 21-5H-1(a) bars the listed demands to employees and potential employees; it states no separate refusal-retaliation or hiring clause.
Investigation and specific-content routeSpecific information of unauthorized transfer permits an investigation and reported-content request; specific content may also be requested for legal/regulatory compliance or work-related misconduct (§ 21-5H-1(b)(4), (6)).
Employer accounts, public content, and regulated workPublic information, legal compliance, employer devices and business accounts, limits on personal-account use during work, and harassment investigations are preserved (§ 21-5H-1(b)(1)–(3), (5), (d)).
Inadvertently received credentials and useAccidental receipt through lawful security/confidentiality monitoring avoids liability only with no access/use by employer or enabled third party, timely deletion unless held for an ongoing security investigation, and reasonable security where likely (§ 21-5H-1(c)).
Enforcement and remediesThe complete Article 5H consists of § 21-5H-1; it states the access prohibitions but names no account-specific complaint forum, damages, or private action.

Requirements one by one

Personal-account access

W. Va. Code § 21-5H-1(a) bars credential demands, employer-observed account access, and compelled addition of the employer or an employment agency as an access-enabling contact. Subsection (e) limits “personal account” to social networking accounts used exclusively for personal communication unrelated to the employer's business.

Specific content and accidental receipt

Section 21-5H-1(b)(4) permits an investigation or employee cooperation where the employer has specific information about unauthorized transfer of listed employer information; it permits a request for the reported content to make a factual determination. Subsection (b)(6) also preserves requests for specific content for legal or regulatory compliance or work-related misconduct. Under § 21-5H-1(c), accidentally received credentials from specified lawful monitoring cannot be used for account access and generally must be deleted as soon as reasonably practicable.

What trips people up

  • A content request differs from a password demand. W. Va. Code § 21-5H-1(b) preserves specified content and investigation routes while subsection (a) separately prohibits coercing personal-account credentials.
  • Security-investigation retention is narrow. Section 21-5H-1(c)(2) permits retaining accidentally received credentials in an ongoing actual or suspected computer, network, or data-security breach investigation; it also requires reasonable security when monitoring is likely to receive them.

Common questions

Can an employer review public information? Yes. Section 21-5H-1(b)(1) preserves access to publicly available information.

Can the employer request a password for its own equipment or business account? Section 21-5H-1(b)(3) preserves that request for the specified employer-issued device or employer-provided or business-purpose account.

Does the section stop a harassment investigation? No. Section 21-5H-1(d) preserves the employer's existing authority and obligation to investigate the listed harassment complaints under the code.

Statutes and sources

  • W. Va. Code § 21-5H-1: personal-account definition, employer prohibitions, exceptions, and accidental-access rule; accessed 2026-10-17.

Source links

Every statute quoted above, linked, with the date we checked it.

W. Va. Code § 21-5H-1(a), (e) · accessed 2026-10-17
W. Va. Code § 21-5H-1(b) · accessed 2026-10-17
W. Va. Code § 21-5H-1(c)–(d) · accessed 2026-10-17
This page summarizes state-law limits on employer access to personal social media accounts. Other employment, privacy, federal, and workplace rules may apply to a particular account or investigation; this is general information, not legal advice.

What does West Virginia law mean for your facts?

You just read the general rule. Ask your own question and see which parts of current West Virginia law apply to your situation, with citations you can check.

Try Ezel Pro free for 7 days. Cancel anytime before the trial ends and you pay nothing.

  • Starts from the statutes this survey is built on
  • Cites every source it relies on, so you can verify it
  • Chat, drafting and research in one workspace