Setting sensible internet policies

A version of this article was first published in Management Magazine, February 2008.


A rapidly evolving web environment requires employers to develop smarter internet usage policies.

Social networking sites Bebo, MySpace and Facebook didn't even exist three to four years ago and it's anyone's guess as to what next year's newest web-craze will be.

As an employer, if you ban one site today, chances are some of your employees are already using a new one you've never heard of.

The most recent website troubling employers is the social networking tool Facebook. But for many HR professionals, the challenges Facebook triggers are nothing new:

"Social networking is simply the activity that is getting the attention today," said one contributor to the HR Zone website. "Last year it was blogging, in the 90s it was internet access and social email, and in the 80s it was using the company phone for personal calls. The problem is not new, only the terminology is new."

For employers this means highly specific internet or website policies for staff can quickly become out-dated and redundant. Broader parameters should be kept in mind when it comes to confirming your preferred internet policy for the workplace.

Initial considerations

What does your organisation's internet policy say about your workplace?

If you ban all social networking sites, restrict access to all but a few work-related websites and closely monitor employee internet usage, you may be just the kind of place any self-respecting Gen Y graduate would shun.

If it's open slather, does your openness effectively encourage a lax approach to working habits and organisational security?

For employers, striking the right balance on your internet policy isn't easy and there are a few things that need careful consideration.

Firstly, the nature and business of every organisation is different. For a media company, Facebook, Bebo and other social networking sites could prove a veritable goldmine of information when researching or reporting on stories. For other organisations, those sites may provide little business value and simply serve as a distraction.

Secondly, the very important issue of bandwidth. Many sites soak it up which can slow down other systems. It can become a painfully slow process to send and receive emails because there's a flood of employees viewing the latest Britney Spears meltdown on YouTube.

Finally there are security issues. Office gossip over the water cooler is one thing, posting information on an external social networking site is quite another. In some sectors of the New Zealand government which deal with classified information, all internet usage is banned. You may not need to go that far but you do need to ensure your internal information is protected.

There are associated risks of employee harassment claims linked to email correspondence between colleagues about colleagues on Facebook. While not, strictly speaking, on one's work email, can such communication lead to disciplinary action - all things being equal?

The next step

Once you have resolved those issues there are some broad guidelines to follow in setting your internet policy:

Don't be too prescriptive - Make sure your internet policy is broad enough to cover a rapidly changing web environment. While it is important to have a strong policy against accessing objectionable or pornographic material, listing every social networking site that staff shouldn't visit is increasingly impractical. Also realise that the web is now part of our daily lives. If you do block certain sites such as TradeMe or Facebook consider allowing employees to go online during lunch hours or before or and after work. A flexible approach goes a long way.

Communicate your policy - In recent Employment Court cases on internet usage the court has stressed the importance of employers communicating their policy on internet usage frequently to staff.

Some Australian employers have their internet policy come up on the screen every time staff log on. Others send frequent email reminders. If internet policy breaches are common in your workplace, it may be sensible to introduce an online policy which staff are required, on a regular basis, to read and accept the terms of use. This requirement would greatly assist to defeat any "I didn't know about that" defence - often the basis of a challenge to a dismissal for inappropriate internet use.

Act reasonably - If an employee can access a site you don't think they should be looking at put them on notice of this, before launching into disciplinary action. It's just common sense isn't it. Again, use clear and consistent communication to adequately inform staff about your internet policy. It can be frustrating for employees blocked from viewing certain sites to learn that peers in other companies are entitled to access those sites. A little less frustration may ensue however, when employees understand their employer's rationale is also linked to ensuring a quicker system to work on.

Don't set viewing time limits - Excessive internet use is an issue when an employee's performance is poor. Setting weekly or monthly limits on the number of hours all staff can be on the net can be self-defeating and alienate employees who resent a "Big Brother" attitude. The focus should be on how the individual is doing their job, not just on their web stats compared to their fellow employees. It is important when counselling a staff member on excessive internet usage that there is "one rule for everyone".

Much of this approach may be difficult to swallow for those employers who believe that internet usage should be in their employee's time, not theirs. The reality though is that many coming into the workplace see access to the web as an inalienable right - not a special privilege.

Marrying up these two perspectives requires internet usage policies that are broad in their scope but clear in their meaning.