Social Media Rules Every Law Firm Should Know Before Posting

An attorney’s Facebook post got a state bar complaint filed against it once — not because it lied, but because it implied a result without the disclaimer the rules require. That’s the trap with legal marketing: the mistakes that get firms in trouble are rarely dramatic. They’re small omissions in otherwise normal, well-meaning posts.

None of this means law firms should stay off social media. It means posting with a few specific rules in mind — the same rules that already govern every other piece of attorney communication, just applied to a new format. Once you know them, they’re easy to build into a normal content routine instead of something to fear.

The rule almost every firm trips on first

ABA Model Rule 7.1 says attorney communications can’t be false or misleading — and in practice, that catches more than outright lies. A post that says “we won a $2 million verdict” without noting that results depend on each case’s facts can read as a promise to a prospective client, even if no one meant it that way. The safest posts describe what the firm did, not what a viewer should expect to happen to them.

Rule 7.1 is also why “no guarantee of outcome” language exists — not as legal boilerplate nobody reads, but because a single enthusiastic post without it can be read as a guarantee. It costs one sentence and removes the entire risk.

What’s actually restricted on social

• Results need context, not just numbers. A settlement or verdict amount is fine to share as long as it’s clear the outcome was specific to that case’s facts, not a preview of what another client should expect.
• Direct solicitation has real limits. Rule 7.3 restricts reaching out to specific individuals who have a known legal need, particularly in real time — a DM to someone who just posted about an accident is a different category of risk than a general post the public happens to see.
• Client details need explicit consent, always. Confidentiality obligations don’t pause for marketing. Even a case that’s already public record, or one the client seems fine talking about casually, needs clear consent before it becomes firm content — and identifying details (photos, names, specifics that make a case recognizable) are the easiest way to cross this line without noticing.
• “Free consultation” claims should say what they actually mean. If there are conditions — a specific practice area, a call instead of a meeting, a time limit — the post should say so instead of a viewer finding out after reaching out.

The content that’s completely fine — most of it

The rules above cover a narrower slice of content than most firms assume. Legal education posts — explaining a process, defining a term, walking through what to expect at a stage of a case — carry almost none of this risk, because they’re not about a specific outcome or a specific person. Firm culture content (team photos, office moves, community events) carries essentially none of it either. A firm that sponsors a local youth sports team or shows up at a community cleanup has a genuinely easy, low-risk post sitting right there.

That’s usually more content than firms realize is safe to run, once the handful of restricted categories are actually named instead of treated as a vague reason to avoid the whole platform.

Compliance as a filter, not a wall

None of these rules ask a firm to post less interesting content — they ask for one extra pass before publishing: does this describe a specific case without consent, does it promise an outcome, does it target one identifiable person with a legal need. Everything else, a law firm can post exactly like any other business. Firms that treat compliance as a quick filter applied before publishing, rather than a reason to avoid the medium, end up with more usable content than the ones playing it safe by staying quiet — a pattern worth keeping in mind for any firm working through law firm social media more broadly, not just the caption rules.