Social media may feel personal, particularly when a post is made outside working hours using a private device or account.
However, under Malaysian employment law, an employee’s online conduct can still have workplace consequences. In serious cases, a social media post may amount to misconduct and justify dismissal.
That does not mean every critical, unpopular or embarrassing post gives an employer the right to dismiss. The real question is whether the post has a sufficient connection to the employment relationship and whether dismissal is proportionate to the misconduct proved.
When Can a Social Media Post Become Workplace Misconduct?
A social media post may amount to misconduct where it breaches an employee’s express or implied duties to the employer.
Examples may include:
- publishing false or defamatory allegations about the employer;
- disclosing confidential business or customer information;
- insulting customers, colleagues or management;
- harassing or threatening a co-worker online;
- making discriminatory or offensive remarks that are linked to the workplace;
- misrepresenting personal views as the employer’s views; or
- posting content that seriously damages the employer’s reputation.
The employer must still prove the alleged misconduct on the balance of probabilities. It should identify the particular post, establish that the employee was responsible for it and explain which workplace obligation or policy was breached.
What If the Post Was Made Outside Working Hours?
Posting after work does not automatically prevent disciplinary action.
In Mohd Hafizul Bin Abdul Rahim v Malaysia Airlines Bhd [2021] 1 ILR 579, an aircraft technician posted a disparaging Facebook comment about the company’s management on a former Prime Minister’s page. He argued that he made the comment during his own time, outside the workplace and using his own internet connection.
The Industrial Court upheld his dismissal. The company’s social media policy expressly stated that employees’ duties of confidentiality and loyalty continued outside working hours and beyond the workplace. The Court found that the comment exposed the company to ridicule and breached the trust and confidence placed in the employee.
The case shows that the place, time and device used are not necessarily decisive. What matters is the connection between the online conduct and the employment relationship.
Does an Employer Need to Prove Actual Financial Loss?
Not always.
An employer may act before an online post causes measurable financial damage. A public statement may expose the business to reputational harm, undermine customer confidence or damage workplace relationships even if no immediate loss can be quantified.
However, an employer should not merely assert that its reputation was affected. It should explain the nature of the risk by considering matters such as:
- the content and seriousness of the post;
- whether the employer was identified;
- the size and nature of the audience;
- whether the post was public or restricted;
- whether it was shared, repeated or reported;
- the employee’s position and responsibilities; and
- the likely effect on customers, colleagues or the public.
Can Online Harassment of a Colleague Justify Dismissal?
Yes, where the conduct is sufficiently serious.
In Prabakharan Balakrishnan v Entegris Malaysia Sdn Bhd [2022] 2 ILR 325, the employee accessed a colleague’s Facebook account, downloaded a photograph of her late mother and used it as his WhatsApp profile picture. His conduct also included repeatedly contacting the colleague about personal matters.
The Industrial Court upheld the dismissal. The fact that the photograph was available on a Facebook account did not give the employee the right to download and misuse it.
Online conduct directed at a colleague may therefore become a workplace disciplinary matter even when it occurs through a personal social media or messaging account.
Continue Learning About Malaysian Employment Law
If you need help handling social media misconduct, preparing a workplace social media policy or assessing whether disciplinary action is justified under Malaysian law, feel free to get in touch. You can also explore Employment Law Malaysia: The Complete Guide for Employees and Employers (2026)for practical articles covering workplace misconduct, disciplinary procedures and unfair dismissal.
Is Criticising an Employer on Social Media Always Misconduct?
No.
Employers should distinguish between malicious attacks and genuine concerns raised in good faith.
An employee may have a legitimate reason to raise issues relating to safety, unlawful conduct, harassment, discrimination or other workplace wrongdoing. A measured and truthful statement is different from publishing knowingly false allegations or abusive remarks intended to damage the employer.
The employee’s language, purpose and chosen audience will be relevant. An employee who uses an internal grievance or whistleblowing channel is also in a different position from one who immediately publishes an accusation to a wide public audience.
An employee should not be immediately dismissed for expressing his views online. Any disciplinary action taken against the employee myst also be proportionate to the actual and proven misconduct.
Does the Right to Freedom of Expression Protect the Employee?
Employees do not lose all freedom of expression when they enter employment.
However, freedom of expression is not an unrestricted right to defame the employer, disclose confidential information, harass colleagues or disregard lawful workplace policies. Employment carries continuing duties of fidelity, confidentiality and confidence.
The question is therefore not simply whether an employee was entitled to hold or express an opinion. It is whether the manner and content of the post breached an employment obligation and caused, or risked causing, legitimate harm.
Must the Employer Have a Social Media Policy?
A written policy is highly advisable, although its absence does not necessarily prevent disciplinary action for conduct that is obviously serious.
A social media policy should explain:
- whether it applies outside working hours;
- how confidential information must be protected;
- whether employees may speak on behalf of the company;
- how the employer’s name, logo and branding may be used;
- expectations concerning colleagues, customers and workplace harassment;
- the consequences of breaching the policy; and
- how employees may raise genuine workplace concerns.
The policy should be communicated to employees and applied consistently. A rule buried in an inaccessible handbook will be less helpful if the employer cannot show that the employee knew or ought reasonably to have known about it.
What Should an Employer Do Before Taking Disciplinary Action?
An employer should avoid dismissing an employee immediately after seeing an objectionable post.
It should first:
- preserve the post and surrounding context;
- verify that the account and post belong to the employee;
- review the employment contract and applicable policies;
- assess the connection between the post and the workplace;
- issue a clear show cause letter;
- consider the employee’s explanation;
- conduct a domestic inquiry where material facts are disputed; and
- decide whether dismissal or a lesser punishment is proportionate.
Section 14(1) of the Employment Act 1955 permits an employer, after due inquiry, to dismiss, downgrade or impose a lesser punishment for misconduct inconsistent with the employee’s express or implied conditions of service.
Does Every Inappropriate Post Justify Dismissal?
No.
The employer should consider:
- the seriousness of the words or images used;
- whether the post was deliberate;
- whether it was public;
- the employee’s seniority and responsibilities;
- whether confidential information was disclosed;
- the harm or potential harm caused;
- whether the employee removed the post or apologised;
- the employee’s disciplinary record; and
- how similar cases were previously handled.
A warning may be more appropriate for a careless but isolated post causing limited harm. Dismissal is more likely to be justified where the conduct involves serious defamation, harassment, threats, disclosure of confidential information or deliberate reputational damage.
Can the Employee Challenge the Dismissal?
Yes.
An employee who considers that they were dismissed without just cause or excuse may file a representation under section 20 of the Industrial Relations Act 1967. The representation must generally be filed within 60 days of dismissal.
The Industrial Court may consider whether the post was proved, whether it amounted to misconduct and whether dismissal was a proportionate response.
Final Thoughts
A personal social media account is not always separate from the workplace.
Where an employee’s online conduct damages the employer, breaches confidentiality or targets a colleague, it may amount to serious misconduct even if it occurred outside office hours.
At the same time, employers should not treat every criticism or unpopular opinion as grounds for dismissal. The content, context, workplace connection and seriousness of the harm must be properly investigated.
The best protection is clarity: a properly drafted social media policy, a fair disciplinary process and a proportionate response.
This article provides general information and does not constitute legal advice. Each disciplinary matter depends on its facts, evidence, employment documents and applicable workplace policies.
