I was alerted today to a legal note from Canadian law firm McCarthy Tétrault titled
Managing the Legal Risks of Social Technology — Part 2 It’s a well-written, clear piece that covers a range of topics relevant to corporations that are currently using, or thinking about using, social media. Part of it deals with social media and disclosure, and it’s that part that I want to comment on because I think it’s too simplistic:
The note says:
There are essentially two approaches that can be taken if you are considering the implications of Web 2.0 to your procedures for corporate disclosure. One posture is simply not to allow executives to participate in social media. Some companies take this approach because they are nervous that the risks inherent in Web 2.0 interactions cannot be sufficiently managed and controlled to permit it to be a safe channel of corporate disclosure.
How many companies never talk to analysts and fund managers on the phone or in person because it’s not “a safe channel of corporate disclosure”? Communications via social media are
no different than interactions via
any other medium.
Actually, there is a difference, a big one.
Social media is mostly public, whereas email, phone calls and one-on-ones are private. The risk of tipping insider information on the phone or in one-on-ones seems far greater than doing so out in the open on a social network. When you release material non-public information on the web to 300 or 3,000 followers on Twitter, it’s pretty
hard to argue that the information is private. The note actually cites
a legal precedent in where information on Facebook was deemed not to be private because the individual had
300 Facebook friends. While the case is outside of the corporate disclosure domain, it’s interesting to think about how a judge would assess the public nature of
an inadvertent slip on Twitter versus one in a private meeting with a fund manager. I think it’s a slam-dunk that the latter is private. Also relevant is that most social media communications are written, allowing the author the
opportunity to think before pushing “post.” This is not the case in one-on-ones or phone calls where the executive must think on their feet and there’s no delete button.
Chances are,
more is let slip in private meetings with investors than will ever be divulged via social media. The note goes on:
The other approach is to update your disclosure policy, and to coach your executives, so that you address the risks of Web 2.0 communications as best you can. This would entail, among other things, the following. Your pre-Web 2.0 disclosure policy likely has a pre-issuance review process for items such as news releases. The policy would be updated to require that draft blog postings and tweets would undergo the same pre-issuance discipline and rigor. Equally, your current disclosure policy probably restricts the number of executives who are permitted to speak for the organization. Presumably, only a sub-set of these same people would be authorized to post blog entries, or make tweets.
This seems like good advice, have lawyers review stuff before it’s posted and restrict who can post. However, it’s
not practical. We need to
draw a distinction between social media communications that are more like formal written disclosures that should be reviewed prior to posting (
blog posts, for instance), and those that should not be reviewed before posting because they are more casual and like oral communications (
blog comments and Tweets). I think a key factor in determining which are formal, well-considered communications and which are casual is the time between a question or comment and the executive’s response.
FINRA’s social media guidelines seem to do this. Although they don’t mention this timing factor, they do draw the distinction between
static and dynamic communications. FINRA seems to recognize that the interactive and conversational nature of many
social media interactions will be stifled if every utterance must go through legal review. I think the same must apply to corporate social media communications.
As for limiting who can participate and
“speak for the organization” this also is
impractical. Anyone who can be identified as an employee of a company speaks for the company when they participate in social media. You
can’t stop them touching on topics that interest investors, because investors are interested in just about everything a company does. Investors are smart enough to weigh the credibility of a statement made by a customer service rep versus one made by the company’s CFO. Yes, customer services reps shouldn’t be answering questions from investors, but telling CSRs they can’t talk about anything remotely related to a company’s financial performance of business prospects is impractical.
How CSRs answer customer questions and the nature of those questions can be relevant information to investors.
Toyota springs to mind. If the company’s policy was that only executives could speak for the corporation, then the fallout over recall debacle would be much worse than it is now. Social media channels like
the company’ss US Twitter account have helped lower-level employees reach out to customers and keep them informed. As an investor, it gives me insight into how they’re handling the crisis that was not possible before social media.
In terms of what they post and tweet about, one approach would be to restrict material for social media dissemination and discussion only to that information about your company that was perviously disclosed through your more traditional disclosure channel(s). In a similar vein, blog posts and tweets might link to other company material that had been previously disclosed. This is an important way to overcome the 140 character limit of tweets.
Two issues here: 1. We need to define “previously disclosed.” Are we talking nanoseconds or days? This advice about only disseminating information that was “previously disclosured” is leading to situations where I think companies are exposing themselves to potential litigation because they’re
too casual about updating their social media followers on material breaking news.
Yahoo! is a recent case
I posted about recently. They tweeted about their earnings release so long after it had been “previously disclosed” that anyone relying on their Twitter account for updates was almost the last to know.
2. This presumes that social media communications are non-public for the purposes of Reg. FD and similar requirements outside of the U.S..
But are they non-public? If a tweet appears
simultaneously on a company website that is a “recognized channel” with investors, is it non-public? If the company’s Twitter account is
followed by 1,000,000 people, is a tweet containing material non-public information really non-public? Technology advances and widespread adoption of social media are reaching the point where I believe
we will have to recognize that social media communications are as effective as news releases. Maybe not for all companies in all circumstances just yet, but I’m comfortable saying that it’s the case for certain companies in certain circumstances. ;-)
Other suggestions for bringing discipline to Web 2.0 corporate disclosure include: maintaining up-to-date (indeed, ideally real-time) records of the content and interactions your executives have with social media (including so that corporate counsel can monitor compliance with your company’s disclosure policy, as updated to cover social media issues); monitoring what other web sites and internet pundits have to say about your organization; and coaching executives about the risks of impromptu communications over social media.
Records are important, but again I have to ask if legal counsel is recording all phone calls and one-on-ones. If they are, that’s fine. But if they’re not, then why apply a
different standard to social media where the
risks of tipping insider info are
much lower?
In essence, it is not impossible to manage the legal risks presented by social media in a Web 2.0 world, but it is challenging. And it requires legal counsel and executives to communicate and co-operate together, so that the attendant risks are managed pro-actively, rather than as items generating regulatory intervention or litigation.
Of course, this is the reason for this note in the first place. You must use your legal counsel help you navigate the “attendant risks” which could lead to “regulatory intervention or litigation.” Only problem here is that the
risks are less than for other investor communications and, so far, we have
no examples of regulatory intervention or litigation stemming from communications to investors via social media.
Other than that, I think it’s
great that lawyers are talking about this stuff. P.S. Thanks to Rob Berick (
@robberick on Twitter) for bringing the McCarthy Tétrault note to my attention. He deserves all the blame.
Posted via email from IR Web Report Bits | Comment »