Criticising Your Boss On Social Media: What’s Legal? (2026 Updated)

Social media makes it easy to vent. A bad shift, a tough conversation with your manager, or a workplace change you didn’t see coming can all lead to that “I’m just going to post it” moment.

But when your post is about your boss (or your workplace), what feels personal can quickly turn into a legal and employment issue. And in a world where screenshots travel faster than apologies, the risk isn’t just theoretical.

This 2026 update reflects how common workplace social media disputes have become, and how seriously employers and employees are now taking privacy, reputation and online conduct.

Let’s break down what’s generally legal in New Zealand, what can cross the line, and what you can do (as an employee or employer) to protect yourself.

Is It Illegal To Criticise Your Boss On Social Media In New Zealand?

In most cases, it’s not automatically illegal to criticise your boss on social media. New Zealand doesn’t have a blanket law that stops employees from expressing opinions online.

However, “not illegal” doesn’t mean “no consequences”. Even if your post doesn’t break the law, it can still:

• breach your employment agreement or workplace policies
• damage the relationship of trust and confidence between you and your employer
• create a valid reason for disciplinary action (if handled through a fair process)
• expose you to claims like defamation, harassment, or privacy breaches depending on what you post

From an employment law perspective, what matters is usually:

• what you said (opinion vs allegation)
• how you said it (abusive, threatening, discriminatory, mocking, etc.)
• who saw it (private group vs public page)
• whether your workplace can be identified
• whether it breaches a policy or contract term
• whether it causes (or is likely to cause) harm to the business, staff, or customers

If you’re an employer, this is why it’s so important your Employment Contract and workplace policies clearly address social media conduct, confidentiality and respectful behaviour.

“It Was On My Personal Account” Doesn’t Always Protect You

A common misconception is that personal social media accounts are off-limits to employers. But if a post affects the workplace (or can reasonably be connected to it), it can still become an employment issue.

For example, if you:

• name your manager or tag them
• identify your workplace in your bio
• post in uniform
• describe details that make the business obvious

…then even a “personal” post can have workplace consequences.

What Laws Can Apply When You Post About Your Boss?

When criticism becomes more than a casual complaint, several New Zealand legal areas can come into play. You don’t need to know every legal test, but you should understand the risk zones.

Employment Law: Misconduct, Serious Misconduct And Fair Process

Most social media issues show up through employment law first. Employers may argue a post is misconduct (or serious misconduct) if it:

• undermines the employment relationship
• breaches confidentiality
• damages the employer’s reputation
• harasses or bullies a manager or coworker
• encourages others to act against the business

Even then, employers generally can’t jump straight to dismissal. They need to follow a fair process, which often includes:

• investigating what happened (including verifying posts aren’t fake or taken out of context)
• putting concerns to the employee and giving a genuine chance to respond
• considering the response with an open mind
• issuing warnings or taking proportionate action (depending on seriousness)

If you’re an employer and you’re relying on your documents and policies in a disciplinary process, it helps if they’re properly drafted and consistent across your business (including any social media policy, code of conduct and confidentiality terms).

Defamation: When “Criticism” Turns Into A Risky Allegation

Defamation is a key risk when posts go beyond opinions and become factual allegations that harm someone’s reputation.

In simple terms, a defamation risk can arise if you publish something that:

• identifies a person (directly or indirectly)
• is communicated to at least one other person (even one friend seeing it can count)
• harms their reputation
• is not defensible (for example, not substantially true or not protected by privilege)

Examples that can get risky fast:

• “My boss steals from staff wages.”
• “The manager is drunk at work.”
• “They’re running scams on customers.”

Even if you believe it’s true, proving it is a different story. If you’re raising serious concerns, it’s usually safer to use internal channels, written complaints, or seek advice rather than posting publicly.

Privacy Law: Sharing Workplace Details, DMs, Or Screenshots

Another common issue is employees (or employers) posting screenshots of:

• workplace group chats
• emails or rosters
• direct messages with a manager
• HR letters or performance documents

Depending on what’s shown, this can raise issues under the Privacy Act 2020 (especially if personal information is disclosed), and it can also breach confidentiality obligations in an employment relationship.

If your business collects and holds employee information, it should be supported by a clear Privacy Policy and internal handling processes, so everyone understands what should stay private and how information is managed.

Harassment, Bullying, And Discrimination

If a post targets someone repeatedly, encourages others to pile on, or contains humiliating or threatening content, it can cross into bullying or harassment. If it includes racist, sexist, homophobic or otherwise discriminatory content, it can create serious issues for both employment law and wider legal obligations.

This is one of the reasons employers should treat social media conduct as part of workplace health and safety and culture, not just a “PR problem”.

When Can An Employer Take Disciplinary Action For Social Media Posts?

Employers can often take disciplinary action if a post has a real connection to work and breaches obligations, policies or expected behaviour.

That said, whether disciplinary action is justified usually depends on the facts. A single vague complaint (“work was stressful today”) is very different from a public attack naming a manager and alleging criminal conduct.

Common Factors Employers Look At

In practice, employers often consider:

• Visibility: Was it public, shared widely, or in a “private” group with lots of members?
• Identification: Does it name the boss or make them identifiable?
• Impact: Did it cause real harm (complaints, staff conflict, customer reaction) or was it likely to?
• Role: Is the employee in a position of trust or leadership?
• History: Is there a prior pattern of conduct or warnings?
• Remorse and response: Did the employee take it down, apologise, or double down?

Serious Misconduct: The High-Risk Category

“Serious misconduct” is typically behaviour that destroys trust and confidence and can justify dismissal (if a fair process is followed). Online conduct can fall into this category if, for example, it includes threats, severe harassment, serious allegations, or major confidentiality breaches.

If you’re an employer, it’s worth getting advice before treating a social media post as serious misconduct, because the process and proportionality matter a lot. A rushed dismissal can lead to a personal grievance even if the post was inappropriate.

What If You Don’t Have A Social Media Policy?

You can still take action in some circumstances, but it’s harder. A clear policy makes expectations explicit and reduces arguments like “I didn’t know that wasn’t allowed”.

At a minimum, your workplace should have clear expectations around:

• confidential information
• respectful conduct towards coworkers, clients and management
• use of company branding, uniforms and workplace images
• public statements that could affect the business

These expectations are often supported through employment agreements and a staff handbook.

Practical Tips If You Want To Speak Up (Without Creating Legal Risk)

If you’re upset at work, you’re not alone. But before you post, it’s worth taking a step back and thinking about the outcome you want.

If your goal is to fix a problem (rather than just vent), there are safer ways to do it.

1) Keep It General, Not Identifying

Posting “I had a rough day at work” is very different from “My manager John Smith at XYZ Company is incompetent and abusive”. Identification is where risk ramps up.

2) Stick To Your Own Experience (And Avoid Allegations)

There’s a difference between:

• Experience-based opinion: “I felt unsupported by management this week.”
• Defamatory allegation: “My boss is committing fraud.”

If you’re alleging wrongdoing, consider raising it through a formal complaint process or getting advice first.

3) Don’t Share Screenshots Or Private Messages

Screenshots feel like “proof”, but they often include personal information, confidential business details, or private communications that weren’t meant for publication.

It’s also worth remembering: deleting a post doesn’t necessarily delete the evidence. Screenshots and downloads can still exist long after you’ve taken something down.

4) Check Your Contract And Policies First

Many employment agreements include confidentiality clauses, non-disparagement expectations, and obligations to act in good faith. Even if “social media” isn’t mentioned, these obligations can still apply to online behaviour.

If you’re unsure, it’s better to ask for advice early than to try to undo damage later.

5) Use Workplace Channels Where Possible

If the issue is about:

• a manager’s behaviour
• unsafe work practices
• bullying or harassment
• unpaid entitlements

…you’re usually better off raising it internally first (for example, in writing to HR or the business owner), and keeping a record of what you raised and when.

What Should Employers Do To Manage Social Media Issues Fairly?

If you’re running a business, employee social media posts can feel personal. But responding emotionally is where employers often get into trouble.

The goal is to protect your business and follow a fair employment process.

Set Clear Expectations From Day One

To prevent disputes, it helps to have:

• a well-drafted Employment Contract that sets behavioural and confidentiality expectations
• a staff handbook or workplace policy that covers online conduct and respectful behaviour
• clear complaint processes so staff have somewhere to raise issues safely

If your team works with customer data or sensitive info, this should also link back to your privacy obligations and internal handling processes.

Investigate First, Then Act

Before you respond to a post, it’s usually worth confirming:

• Is it definitely your employee’s account?
• Has the post been edited or taken out of context?
• Was it public or private?
• Has it actually caused harm, or is it just uncomfortable?

Even when the post is clearly inappropriate, you still need to follow a fair process and document your steps.

Consider Proportionate Outcomes

Not every social media breach should lead to dismissal. Depending on the circumstances, proportionate outcomes might include:

• a direction to remove the post
• a formal warning
• training on social media use, bullying, or privacy
• mediation or facilitated discussion (where appropriate)

Also be careful about consistency. If one employee is punished harshly while others have posted similar content with no consequences, that can create fairness issues.

Be Careful With Monitoring And Privacy

Employers sometimes want to monitor staff social media accounts or investigate posts. You can usually review content that is publicly available, but it’s wise to think carefully before:

• asking staff to hand over passwords
• accessing private accounts or private messages
• using workplace surveillance tools in a way that feels intrusive

If your business uses monitoring tools (for example, cameras or other workplace surveillance), you should ensure you’re complying with your wider privacy and workplace obligations, and that you’re transparent with staff about what’s in place.

Many businesses address these issues in a broader employee privacy framework, especially as remote work and digital comms become more common.

Key Takeaways

• It’s not automatically illegal to criticise your boss online in New Zealand, but it can still lead to employment consequences depending on what you post and how it connects to work.
• Social media posts can trigger legal issues around employment obligations, confidentiality, privacy breaches and defamation, especially where allegations are made as “fact”.
• Even if you post from a personal account, your employer may be able to take action if the post identifies the workplace, harms the business, or undermines the employment relationship.
• Sharing screenshots of messages, workplace documents, rosters or HR letters can create privacy and confidentiality risks, even if your intention is to “prove your point”.
• Employers should respond carefully and follow a fair process: investigate first, give the employee a chance to respond, and ensure any outcome is proportionate.
• Clear contracts and workplace policies help prevent disputes from day one and make it easier to manage social media conduct consistently.

If you’d like help setting clear expectations in your workplace or navigating a social media-related employment issue, you can reach us at 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.