Social Media Policy

Purpose 

The aim of this policy is to: 

• ensure social media activity does not jeopardise the confidentiality of corporate, staff, personal, and client information
• provide clear guidance on appropriate online behaviour and communications
• support a workplace culture free from any form of violence, bullying, harassment and/or discrimination
• promote respectful workplace relationships through ethical and professional online behaviour, interactions and communications.

Comments made on social media are in the public domain and should be considered public in a similar way to comments made in media or in a public forum. Comments or posts on social media with any reference to DCITHS or its partner agencies may be taken to be work-related, irrespective of how and where they are published. 

This policy is aimed principally at DCITHS staff social media activity. Authorised use of official DCITHS channels is dictated by the NSW Government Social Media Guidelines.

Scope 

Everyone working for the Department of Creative Industries, Tourism, Hospitality and Sport (DCITHS) must comply with this policy. 

Specifically, this policy applies to: 

• all staff, including leaders and supervisors, whether employed on a permanent, temporary, casual, intern or cadetship basis
• all contractors and agency workers performing work for or on behalf of the DCITHS
• any member of another public sector agency on secondment to the DCITHS
• work experience students and volunteers
• all vendors/suppliers. 

The term ‘staff’ is used in this policy to cover all DCITHS executives, managers, staff, contractors, and volunteers within and outside Australia.

Social Media Definition 

Social media refers to social media sites, applications, tools and platforms that provide users with online infrastructure and resources to connect and communicate and exchange content or information online. They include but are not limited to: 

• Facebook, Facebook Messenger, Instagram, Twitter, LinkedIn, Tik Tok, Snapchat, YouTube, WhatsApp, Yammer, Reddit, Medium blogs and WordPress blogs. 

Activity on social media governed by this policy includes, but is not limited to: 

• posts 
• uploads 
• live streams 
• comments
• replies 
• retweets or reposts 
• liking 
• reacting.

Staff use of social media 

All social media usage by staff can become public, and may become subject to this policy regardless of whether it was intended to be private.

Social media that directly or indirectly results in damage to DCITHS, its partner agencies, brings DCITHS into disrepute, and/or impacts the safety, health and wellbeing of colleagues and customers may be considered a breach of this policy.

When in doubt, staff should seek guidance from their manager on how to comply with their obligations under this policy.

DCITHS will not subsidise or fund personal social media accounts, including LinkedIn or LinkedIn Premium. 

Cyber Security NSW has issued a directive preventing NSW Government departments and agencies from accessing and installing the TikTok application on government-issued devices. As such, staff are directed to prevent the installation of, and remove existing instances of, the TikTok application on government-issued devices.

There may be circumstances in which NSW Government clusters, agencies or staff require access to the TikTok application for work purposes, e.g. communications, promotions and research. In these cases, an adequate risk assessment (consistent with the guidelines set out in the ‘Cyber security risk management requirements’ below) must first be completed in consultation with the agency or cluster Chief Information Security Officer or equivalent and may only proceed with their approval. Agencies using the TikTok application must also implement risk mitigation strategies in accordance with Cyber Security NSW guidance (Cyber Security NSW is developing more detailed advice, which will be provided to clusters and agencies).

Agencies should also continue to manage third-party risk per the requirements of the NSW Cyber Security Policy.

Source: https://arp.nsw.gov.au/dcs-2023-01-cyber-security-nsw-directive-protecting-nsw-government-information-on-government-issued-devices

If staff use a personal device to access work-related emails, messaging or documents – in line with departmental bring-your-own-device (BYOD) policies – they must ensure that their device use is compliant with agency policies, e.g. acceptable use of IT and information security policies.

Note: Staff should ensure that they use any personal devices in a cyber secure way, even where they are not accessing NSW Government systems or information.

Source: https://www.cyber.gov.au/acsc/view-all-content/guidance/personal-cyber-security-first-steps-guide

Appropriate use of social media

Social media commentary may be governed by this policy even if shared anonymously or without any workplace reference in a social media profile if the content does not meet the following standards.  

Staff should:  

• follow the Terms of Use of the relevant social media platform
• treat clients, colleagues and other public officials with respect, courtesy, honesty and fairness
• clearly separate private opinions from DCITHS’s official position. A disclaimer should be used when expressing private views related to your work, and there can be no implication that the department endorses any private opinions
• only disclose and discuss publicly available information about DCITHS. For clarification about what information is available in the public domain, liaise with the DCITHS Media and Corporate Affairs team
• only publish content that is accurate
• be aware that commenting on government may be deemed a breach of the policy if the social media is not respectful, courteous, honest and fair
• refer any media interest generated through the use of social media to the relevant media contact for management using the DCITHS's Media and External Event Policy. 

Staff should not:  

• create, publish, search, or share social media that is, or might be perceived as threatening, harassing, bullying or discriminatory towards DCITHS and partner agency colleagues, or stakeholders
• publish or share colleagues’ personal information 
• publish or share private work-related contact information, e.g. phone numbers or similar information on social media. Publishing a work phone number or email that isn’t in the public domain can only be done with express permission from the DCITHS Media and Corporate Affairs Team
• publish or share client related information including any material deemed private or personal information. This includes client names, addresses, or photographs
• publish or share details of transactions or engagements clients have with DCITHS unless this is expressly agreed in writing with a signed release form (e.g. media case studies)
• publish or share content that fails to meet reasonable community standards which could damage the reputation of the staff member or the organisation.  

Official Departmental use of social media 

• Social media account activity for or on behalf of DCITHS is centralised as a service within the Operations team unless otherwise approved in writing by the DCITHS Executive Director, Strategic Communications and Engagement
• You must not establish or operate a social media account for or on behalf of DCITHS unless authorised in writing from the DCITHS Executive Director, Strategic Communications and Engagement
• You should not provide client care or insider commentary about DCITHS on social media, unless otherwise authorised in writing by the DCITHS Executive Director, Strategic Communications and Engagement.

Final approvals for organic and paid social media publication will be determined by the centralised media unit in-line with the NSW Government Social Media Guidelines.

Preventing bullying, harassment and discrimination in social media 

You must treat colleagues with respect and dignity, and have proper regard for their interests, rights, safety, health and welfare. This extends to online behaviour, interactions and communication.

DCITHS will not tolerate any form of conduct, online behaviour and communication which is, or may be perceived as threatening, bullying, harassing and / or discriminatory. This includes online conduct, comments, and communication by staff members either during or out of office hours, or when using a private social media platform. In particular, staff must not make comment about another person’s: 

• sex 
• gender 
• marital status 
• carer’s responsibilities 
• ethnicity 
• religion 
• disability or illness 
• age 
• sexual preference (presumed or actual) 
• transgender status (presumed or actual) 
• political opinion/affiliation 
• involvement (or non-involvement) with union associations, professional associations, or related associations 
• image or 
• income. 

Breaches of this Policy 

This policy does not intend to discourage nor unduly limit a staff member’s online activities. However, all staff should ensure that their conduct is consistent with the Code of Ethics and Conduct and other relevant legislative requirements and the responsibilities contained in this policy. 

DCITHS may commence disciplinary action if a person to whom this Policy applies breaches this Policy (or any of its related procedures) up to and including termination of employment. 

Variation

The Department may amend this policy from time to time as appropriate.