Employee Text Messaging Policy: What to Include
Employees already text about work. They text supervisors after hours, text clients from personal phones, and occasionally text a patient, a donor, or a constituent from a number the organization does not control and cannot retain. A text message policy for employees does not create that behavior; it channels it into approved systems, sets expectations that hold up better under a wage-hour audit, and produces records an employer can actually produce in litigation. This is a model policy with the legal reasoning behind each section, so counsel can adapt rather than rebuild.
The Legal Backdrop Your Policy Has to Account For
Employee texting sits at the intersection of an unusual number of legal regimes. A policy written without them tends to be unenforceable or actively harmful.
- Fair Labor Standards Act. When a non-exempt employee reads and answers work texts after a shift, that can be compensable work time. The FLSA requires payment for hours worked that the employer knows or has reason to know about, even unauthorized hours. The de minimis doctrine has historically excused insubstantial fragments of time, but courts have narrowed it and some states reject it. Off-the-clock texting is a live overtime exposure.
- National Labor Relations Act, Section 7. Employees have a protected right to engage in concerted activity, including discussing wages, hours, and working conditions with each other. A policy that broadly bans discussing employment terms by text can be an unlawful restriction. Draft the confidentiality and conduct sections narrowly and add an express Section 7 savings clause.
- Stored Communications Act and Electronic Communications Privacy Act. These statutes limit unauthorized access to and interception of electronic communications, including messages held by a service provider. Access rights must be disclosed, limited to employer-provided systems, and consented to in writing.
- State two-party consent and device privacy laws. States differ on recording and interception consent, and several restrict employer access to personal accounts and devices. Multi-state employers should follow the most protective standard or maintain a state addendum.
- HIPAA. For covered entities and business associates, workforce texting of protected health information triggers Privacy Rule and Security Rule obligations, training, and sanctions requirements. PHI moves only through evaluated systems covered by a Business Associate Agreement.
- Federal Rules of Civil Procedure Rule 34 and Rule 37(e). Text messages are electronically stored information, discoverable under Rule 34, and Rule 37(e) governs sanctions for failing to preserve ESI that should have been preserved. If work texts live only on personal phones, litigation holds are nearly impossible to execute. Our guide to text message archiving covers the retention architecture.
- FINRA and SEC recordkeeping rules. Regulated financial firms are the extreme case: Exchange Act Rule 17a-4 and FINRA supervision and recordkeeping rules require retention and supervision of business communications, and off-channel messaging has drawn substantial enforcement activity. These firms should treat unapproved texting as a supervisory failure, not a policy preference.
- Telephone Consumer Protection Act. When employees text non-employees, customers, patients, applicants, donors, the TCPA and FCC rules on consent, identification, and opt-out apply. Texting from personal phones is where organizations lose their consent records.
- Americans with Disabilities Act and Title VII. Texting intersects with accommodation, since some employees need alternative formats or schedules, and with harassment liability, since sexual and hostile-environment harassment happens by text. A policy should route accommodation requests and harassment complaints explicitly.
- Expense reimbursement statutes. If employees use personal phones for work, some states require reimbursement of necessary business expenses. California Labor Code Section 2802 is the well-known example, and courts have applied it to mandatory personal cell phone use. A BYOD program without a stipend or reimbursement mechanism invites wage claims.
Public employers carry additional obligations around records retention and public disclosure; see our government text messaging policy template for that variant.
Model Employee Text Messaging Policy
1. Purpose and Scope
This policy governs all text messaging, SMS, MMS, and comparable short-message communication conducted for or about Company business, whether sent from Company-provided or personal devices, and whether to coworkers, customers, vendors, or the public. It applies to employees, contingent workers, interns, and volunteers.
2. Definitions
Business text message: any text relating to Company operations, clients, patients, students, constituents, or personnel matters. Approved platform: a messaging system designated in Section 3. Shadow app: any unapproved messaging application. Sensitive data: protected health information, education records, personnel and medical files, financial account data, government identifiers, and other confidential information.
3. Approved Channels; Prohibition on Shadow Apps
Business text messages must be sent and received only through the Company's approved messaging platform. Personal SMS threads, consumer messaging applications, disappearing-message features, and any application that prevents Company retention are prohibited for business communication. Employees may not disable retention, delete business messages to avoid retention, or use auto-delete on business threads.
4. Business Use of Personal Devices (BYOD)
Employees who use a personal device for business texting must install and use the approved Company application for all business messages. Where the Company requires personal device use, employees are eligible for the reimbursement or stipend described in the BYOD Addendum, consistent with applicable state expense-reimbursement law. Company access is limited to the Company application and its data; the Company does not access personal messages, photos, accounts, or content outside it.
5. After-Hours Expectations and Non-Exempt Employees
Non-exempt employees are not expected or authorized to read or respond to business text messages outside scheduled work hours except when directed by a supervisor. All time spent reading or responding to business texts is work time and must be recorded and will be paid, including time worked without prior authorization. Supervisors may not send non-urgent texts to non-exempt employees outside scheduled hours and may not discourage recording of message time. Unpaid time must be reported under Section 12; retaliation is prohibited. Exempt employees should use judgment consistent with their role and any on-call or rest-period requirements.
6. Confidentiality and Protected Data
Sensitive data may be transmitted by text only through the approved platform, only to verified recipients, and only in the minimum amount necessary. Do not text sensitive data to personal numbers, group threads with unverified members, or external parties absent documented authorization. Nothing in this section restricts employees from discussing wages, hours, or other terms and conditions of employment, or from exercising rights protected by Section 7 of the National Labor Relations Act or other applicable law.
7. Recordkeeping and Retention
Business text messages are Company records, subject to the retention schedule and to discovery in litigation and regulatory inquiry. Messages sent through the approved platform are retained automatically. Upon notice of a litigation hold, employees must preserve all potentially relevant messages, including any on personal devices, and must not delete, alter, or migrate them.
8. Monitoring and Privacy Notice
The Company may access, review, monitor, and disclose business messages sent through Company systems and the approved application for legitimate business purposes, including compliance, investigation, and legal obligations. Employees should have no expectation of privacy in business messages on Company systems. The Company does not monitor personal accounts or content outside the approved application, and will not request personal credentials.
9. Professional Conduct and Anti-Harassment
All text communication must meet the same professional standards as email and in-person conduct. Sexual, discriminatory, threatening, or harassing messages are prohibited, including outside working hours and from personal devices. Report concerns through the channels in the anti-harassment policy. Employees needing an accommodation related to messaging, including alternative formats or schedule limits, should contact Human Resources; the Company will engage in the interactive process required by the Americans with Disabilities Act and applicable state law.
10. Texting Customers, Patients, and the Public
Outbound texting to non-employees may be sent only from the approved platform, only where required consent is documented, and must identify the Company and honor opt-outs immediately and permanently. Employees may not text customers, patients, students, or constituents from personal numbers. Clinical, legal, and eligibility decisions are not made by text.
11. Security Requirements
Devices used for business texting must have a passcode or biometric lock and current operating system updates. Employees must report lost or stolen devices immediately so the Company application and its data can be removed remotely. Upon separation or role change, the Company will remove the approved application and its data, and employees must cooperate; the Company will not wipe personal content.
12. Reporting and Enforcement
Report suspected violations, unrecorded work time, security incidents, or improper disclosures to your supervisor, Human Resources, or the compliance contact. Violations may result in discipline up to termination and, for regulated roles, regulatory reporting.
13. Acknowledgment
Each employee signs an acknowledgment confirming they received the policy, consent to Company access to business messages on Company systems, understand time-recording obligations, and agree to BYOD terms where applicable.
14. Review Cycle
Human Resources and Legal review this policy annually and after any material change in law, platform, or regulatory posture.
Adoption Checklist
| Step | Owner | Why it matters |
|---|---|---|
| Inventory current texting practices and shadow apps | IT and Compliance | You cannot govern channels you have not found |
| Select an approved platform with retention and a signed BAA where PHI is involved | IT, Legal | Retention and HIPAA duties depend on the system, not the policy |
| Legal review for FLSA, NLRA Section 7, and state privacy and reimbursement law | Legal | Overbroad drafting is a common defect |
| Set BYOD stipend or reimbursement method | Finance, HR | State expense statutes such as California Labor Code Section 2802 |
| Update timekeeping instructions for message time | HR, Payroll | Off-the-clock texting is a wage-hour exposure |
| Train supervisors on after-hours messaging limits | HR | Supervisor behavior, not policy text, creates liability |
| Map retention schedule and litigation hold procedure | Legal, Records | Rule 34 discovery and Rule 37(e) preservation |
| Collect signed acknowledgments and BYOD addenda | HR | Consent and notice must be documented |
| Add offboarding step to remove the work application | IT | Prevents orphaned data and unmonitored channels |
| Calendar annual review | HR, Legal | Law and platforms both move |
This article is general information, not legal advice. Requirements vary by jurisdiction and change over time, so confirm your own obligations with qualified counsel or the relevant regulator.
Frequently Asked Questions
Do employers have to pay employees for answering texts after hours?
Under the Fair Labor Standards Act, time a non-exempt employee spends reading and responding to work texts is generally compensable hours worked, and the employer must pay for hours it knows or has reason to know were worked, even if unauthorized. The de minimis doctrine has excused truly insubstantial time, but courts have narrowed it and some states reject it. Require employees to record message time, pay it, and train supervisors not to generate after-hours messages for non-exempt staff.
Can an employer ban employees from texting about work?
Not broadly. Section 7 of the National Labor Relations Act protects employees who discuss wages, hours, and working conditions with each other, including by text on personal devices. A policy that prohibits discussing employment terms, or claims the right to discipline group messages about work conditions, risks being unlawful. Employers can require that communication with customers, patients, and third parties run through approved systems, with an express savings clause preserving protected activity.
Can an employer read text messages on an employee's personal phone?
Only with clear authorization and narrow scope. The Stored Communications Act and Electronic Communications Privacy Act restrict unauthorized access to electronic communications, and several states limit employer access to personal accounts and devices. The defensible approach is a containerized work application: the employer accesses and retains only business messages inside that application, discloses the access in a written monitoring notice, obtains signed acknowledgment, and never requests personal credentials.
Does an employer have to reimburse employees for using personal phones for work?
In several states, yes. California Labor Code Section 2802 requires reimbursement of necessary business expenses, and it has been applied to mandatory personal cell phone use for work; other states have comparable statutes. Employers running BYOD texting programs generally provide a stipend, reimburse a reasonable portion of the plan cost, or issue company devices. Document the method in a BYOD addendum and apply it consistently, since inconsistent practice draws claims.
Are work text messages discoverable in a lawsuit?
Yes. Text messages are electronically stored information subject to discovery under Federal Rule of Civil Procedure 34, and Rule 37(e) governs sanctions when a party fails to preserve ESI it should have preserved. Once litigation is reasonably anticipated, the duty to preserve attaches, including to messages on personal devices used for work. Regulated industries face stricter standing duties under Exchange Act Rule 17a-4 and FINRA recordkeeping and supervision rules.
Policy on Paper, Compliance in the Channel
A policy only works if employees have an approved place to text. FRANSiS gives organizations a governed messaging channel with retention and export for litigation holds, documented consent and opt-out handling, role-based access, remote removal at offboarding, compliance supported with a signed BAA included, and an AI Powered Helper handling routine inbound questions. Contact us to move work texting out of personal phones and into a system you can defend.
