Should accountants have a social media policy? Yes, and one page is enough

The short answer

Yes. Every accountancy firm where more than one person posts, or could post, as the firm should have a written social media policy. It does not need to be long. One page that says who may post, what is never posted, who approves posts and how personal accounts work will prevent most problems before they happen.

ICAEW's own helpsheet on using social media says practices should have IT security policies and a specific policy on social media if they do not already have them. ACCA, AAT and other bodies publish their own ethics guidance, so check yours as well.

Why a small firm needs one: the offhand post

Most social media trouble in a small practice does not come from a planned post. It comes from an offhand one: a quick photo of the office that shows a client file on the desk, a cheerful "just filed 40 returns for our farming clients in the village", a reply typed on a phone between meetings.

When one partner does all the posting, the rules live in that partner's head. The moment a second person gets the login, those rules need to be written down. Otherwise each person works to their own idea of what is fine, and nobody notices the gap until something has gone out.

A policy also protects the people who post. A junior member of staff who has been told what is off limits, and who has a partner approving their drafts, can post with confidence instead of guessing.

Who may post as the firm

Start by naming names. The policy should say exactly who may publish on the firm's pages, and who may only draft.

• Owners of each account.Name one person who holds the login, or the admin role, for each of the firm's LinkedIn, Facebook and Instagram pages.
• Who can draft. Anyone on the team can suggest a post. Say so, because good ideas often come from the people answering client emails.
• Who can publish. Usually a partner or the practice manager. Keep the list short.
• Access when people leave.Removing a leaver's access to the firm's pages belongs on the same leaver checklist as their email account.

ICAEW's helpsheet makes the same point from the security side: practice owners should understand what controls are available to delegate and restrict staff access to the practice's social media accounts. Use page roles on each platform rather than sharing one password around the office.

What is always off limits

This is the most important section of the policy. Write it as a plain list that nobody can misread. For an accountancy firm, it should include at least the following.

• Client names and identities, unless the client has agreed in writing to that specific use. That includes "guess who we just took on" hints and photos from a client's premises.
• Anything from a client's file: figures, tax positions, payroll details, reference numbers, screenshots of software, and anything else that could identify them.
• HMRC correspondence and disputes, even with names removed. A partly redacted letter can still identify a client to someone who knows them.
• Criticism of other firms, competitors or named businesses.
• Claims you cannot back up, such as "the leading firm in the county" or "we always get you a refund".
• Politics, arguments and anything offensiveon the firm's accounts.
• Tax figures you have not checked against GOV.UK or HMRC on the day you post.

The marketing helpsheet also says firms must not say anything in promotional material that is disparaging of or discredits the practice or services of others, and shall not make exaggerated claims for services offered, qualifications possessed or experience gained. Copying those two rules into your policy almost word for word is a sensible start.

How the firm sounds

A short section on tone stops the firm's pages sounding like five different people. Two or three lines are enough.

• How you address readers, for example "you" and plain English, no jargon.
• Whether you use emojis and hashtags, and how many.
• Who signs posts, if anyone, such as "Sarah, practice manager".
• A line on what the firm wants to be known for, such as calm, practical help for local owner-managed businesses.

If the team struggles for ideas within that tone, our social media content calendar for accountants shows how to plan a month of posts in one sitting, which also makes the approval step much easier.

The approval step

Every post should be seen by a second person before it goes out, and the policy should say who that is. In most small firms it is one partner, with a named stand-in for holidays and January.

• What the approver checks: no client can be identified, every figure and date is right, nothing breaks the off limits list, and it sounds like the firm.
• When approval happens: in a regular slot, such as Monday morning for the week ahead, so posts do not sit waiting.
• What needs no approval: some firms allow a small set of routine posts, such as office closure notices, to go out without one. If you do, list them.

The easiest way to make approval stick is to build it into the tool you post with. In Pillr, for example, drafts wait for someone at the firm to approve them before they are scheduled, so the partner sign-off happens as part of the routine rather than relying on memory. Whatever you use, avoid any setup where a post can go live without a second person seeing it.

The same rule applies to drafts from software and from outside help. If you use AI for first drafts, our guide on whether accountants should use AI to write social media posts sets out the checks. If an agency posts for you, ICAEW's helpsheet says firms are ultimately responsible for anything published in their own name, even if outsourced. Our guide on whether accountants should outsource social media covers that choice.

Personal accounts of partners and staff

Partners and staff will post on their own LinkedIn profiles, and for an accountancy firm that is usually a good thing. The policy should not try to control personal accounts. It should set a few clear expectations for when someone is identifiable as working at the firm.

• The off limits list still applies.A client's affairs are no less confidential on a personal profile.
• Say when a view is personal. If someone comments on a tax change or a news story, it should be clear whether they speak for the firm.
• Sharing firm posts is welcome.Say so. Staff resharing the firm's posts is one of the easiest ways to reach more people.
• Care with client connections. Connecting with a client on LinkedIn can reveal the relationship. Leave it to the client to connect first, or agree a rule.

ICAEW's helpsheet notes that the boundaries between personal and professional use are often not clear, that the same ethical obligations that apply offline also apply online, and that individuals should consider this even in their private lives, particularly where their status as a chartered accountant is known or discoverable. It also says employers cannot usually stop staff using social media in their personal lives, which is why the policy should guide rather than ban.

Comments, complaints and mistakes

Your policy should name who reads and answers comments, and say that any complaint is moved out of public view and handled through the firm's normal complaints route. Keep this part short and point to a fuller comment policy. Our guide on how accountants should handle negative comments on social media covers the replies, roles and hide or delete decisions in detail, so there is no need to repeat them here.

Then say what happens when something goes wrong, because eventually it will. ICAEW's helpsheet says plainly that mistakes will happen, and that practices should have a response plan, make sure staff know about it, and nominate one person to manage any incident. In a small firm the plan can be four lines.

That example is written by us to show the shape; use your own names. Keep the tone of this section calm. People who are afraid of being blamed tend to hide a mistake rather than report it, and a hidden mistake is the one that does the damage.

How to write it on one page

A policy nobody reads protects nobody. Aim for one side of A4, written in the same plain language you use with clients.

• Use headings that match this guide: who posts, off limits, tone, approval, personal accounts, comments, mistakes.
• Write rules, not principles."Never name a client without written consent" is a rule. "Respect client confidentiality" is a principle people interpret differently.
• Name people, not roles alone."James approves posts; Priya covers when he is away" leaves no doubt.
• Link out for the detail. Point to the staff handbook, IT policy and complaints procedure rather than repeating them.
• Get every partner to sign it. A policy the partners have signed is one the partners follow, and staff notice when they do.

ICAEW's helpsheet suggests a social media policy should cover matters such as recruitment, bullying, harassment, defamation, data protection and privacy, and may set out which channels the business uses and guidance for employees on how social media reflects on them and the practice. If your one page is the working summary, those wider employment points can sit in the staff handbook it links to. Take advice on the employment wording if you are unsure.

Keeping the policy alive

A policy written once and filed away is out of date within a year. Three habits keep it working.

• Review it whenever someone joins or leaves. New joiners read and sign it in their first week, and the access list is updated when anyone leaves.
• Review it when you add a platform or a tool. Starting an Instagram account, hiring an agency or bringing in a scheduling tool all change who can post.
• Review it after any mistake. Every slip should end with one changed line in the policy, not just an apology.

The helpsheet adds that it is usually insufficient to just have a social media policy: practices should also consider training and support for the people who post. In a small firm that can be ten minutes in a team meeting, walking through two or three recent posts and why they passed approval.

If you are still deciding how much social media your firm should do at all, start with do accountants need social media? To see a month of drafts for your own firm, waiting for your approval before anything is scheduled, paste your website address on the home page.

This guide is general information, not legal or employment advice. Check your own professional body's guidance on social media, marketing and confidentiality before you finalise your firm's policy.

Questions accountants ask about social media policies