Rules and ethics
Part of What is social media crisis monitoring and why do UK brands need it?
What is social media crisis monitoring and why do UK brands need it?
Social media crisis monitoring UK brands can act on: response times UK journalists expect, FCA and Ofcom duties, and real-time brand alerts that hold up.
What to take away
- Social media crisis monitoring watches mentions, comments and search demand during an incident, with a named owner and a written log.
- UK law reaches into itposts hold personal data under the UK GDPR and the Data Protection Act 2018.
- Brand posts written during a crisis still meet the CAP Code, and regulated sectors face extra duties through the FCA and Ofcom.
- Real-time brand alerts only work if triage, escalation and correction rules were agreed beforehand.
What social media crisis monitoring actually covers
Campaign listening asks what people think about a brand over a quarter. Crisis monitoring asks a narrower question: what is being said in the next hour, by whom, and does it change what we do next. That shift in time horizon changes the staffing and the paperwork.
It also covers more than one channel. A UK incident usually surfaces in several places at once: replies under your own posts, quote posts, review sites, local news comments and search suggestions. Monitored together, those give context that a single channel hides.
The output is not a dashboard. It is a decision trail: what was seen, when, who was told, what was published and what was corrected later. That is why the social listening failures to rehearse matter.
Response times: UK figures and journalist deadlines
Speed is the part UK teams most often get wrong, because a weekly reporting rhythm teaches the wrong habits. National news desks work to publishing deadlines, so holding lines and approvals need to exist before the incident rather than during it.
A common UK service level is a first holding line within 30 to 60 minutes for a tier two alert during office hours, and a same day substantive reply once facts are confirmed. For a breaking story, the first online cycle can close within 30 to 90 minutes, so a statement cleared after that may arrive too late.
Alert tiers and who acts
Watch
- Trigger
- Volume above baseline
- Who acts
- Analyst on shift
- Evidence held
- Timestamped captures
Escalate
- Trigger
- Regulator or outlet joins
- Who acts
- Comms lead and counsel
- Evidence held
- Alert record and time
Stand up
- Trigger
- Legal or safety risk
- Who acts
- Incident group, one owner
- Evidence held
- Full log and sign-off
Write your own service levels instead of borrowing a figure from a vendor deck. Who reads an alert when it fires out of hours? Who can approve a reply without calling a meeting? Who can take a post down?
Tier your alerts so that ordinary noise and genuine risk do not arrive in the same email.
| Tier | Trigger | Who acts | Evidence held |
|---|---|---|---|
| Watch | Volume on a brand term moves above its own baseline | Analyst on shift | Timestamped captures and the query text |
| Escalate | A named spokesperson, regulator or national outlet joins | Comms lead with duty counsel | Alert record, decision and time |
| Stand up | Legal, safety or regulatory risk appears | Incident group with one owner | Full log, corrections and sign-off |
Where UK rules bite during a live incident
Posts, comments and profiles are personal data when they identify someone, so monitoring sits inside the UK GDPR. The ICO's Guide to the UK GDPR, including its guidance on lawful bases and individual rights, is the reference point for what you may keep, for how long, and what you must tell people.
The Data Protection Act 2018 provides the UK framework that sits alongside the UK GDPR, and it is the statute to cite when someone asks what applies here.
Marketing published during a crisis is still marketing. The CAP Code, especially rules 2.1, 3.1 and 3.7, applies to brand posts and paid ads, including claims typed in a hurry.
Regulated sectors carry extra duties on top. Financial promotions fall to the FCA, and broadcast output falls to Ofcom, so going quiet on social media is not automatically the safe choice for those brands.
Who signs off corrections and takedowns
For corrections, the comms lead approves the wording and the duty lawyer clears legal risk. For takedowns, the incident owner requests removal, the platform or publisher decides, and the data protection lead confirms what personal data is deleted or retained. Log the decision, time and owner.
Building real-time brand alerts that hold up
Five steps, agreed before the incident:
Five steps for real-time alerts
- Fix query set and exclusions in writing
- Set tier thresholds against own baseline
- Name on-call owner and deputy per shift
- Keep one timestamped log team can reach
- Review after activation and delete unlawfully held material
- Fix the query set and the exclusions in writing, so an alert means something at 2am.
- Set tier thresholds against your own baseline, never a vendor default.
- Name one on-call owner per shift, plus a deputy who can act without a meeting.
- Keep one log with timestamps, links and captures, somewhere the whole team can reach.
- Review after every activation and delete material that no longer has a lawful basis.
Worked example for a UK retailer. Watch query: ("YourBrand" OR "YourBrand UK") AND (refund OR outage OR recall OR safety) NEAR/5 (order OR delivery). Exclusions: -site:yourbrand.co.uk -"YourBrand jobs" -"YourBrand competition" -"YourBrand giveaway".
Baseline: alert if 24 hour mentions exceed the 30 day median by 50 percent, or if 10 unique authors use refund, outage or recall in 30 minutes. Escalate if a national outlet or regulator account joins.
Collecting evidence about individuals also creates a record you have to manage. A disclosure policy that covers sources, limits and corrections should already say how that works.
Common questions
Does crisis monitoring need a paid social listening tool?
Not always. For a small UK business, native alerts plus a weekly review of mentions may be enough. Paid platforms earn their place when volume, languages, historical search or evidence export matter.
Does UK data protection law stop us monitoring posts about our brand?
No. You can monitor on a lawful basis, but you should record that basis, keep only what you need and honour individual rights when someone asks.
How is crisis monitoring different from community management?
Community management answers people who contact you. Crisis monitoring watches the wider conversation you were not addressed in, including news coverage, review sites and search suggestions.
Should we monitor during live events if we are not a broadcaster?
Usually yes for sponsored or high-visibility moments. Write down the scope first, because the queries that watch an event also collect personal data from people who never mentioned you.
