Safety Norms: Public Relations and Corporate Communications

1Purpose, Scope, and Safety Principles

These norms apply to anyone who plans, drafts, approves, publishes, or responds to communications on behalf of an organization. That includes in-house communications staff, agency partners, executives who speak publicly, spokespeople, moderators, and contractors who manage channels or media relations. The scope covers print, broadcast, digital, social, event, internal, and investor-facing communications.

Four principles guide every norm. Communicate only what has been verified. Respect the people, creators, and audiences affected by a message. Protect information entrusted to the team. Treat harm to audiences as both an ethical duty and a business risk. Where this document says must, the rule is mandatory for any organization that adopts it. Where it says should, the rule is recommended practice that a team may adapt if it records the reason.

• Mandatory: no statement is published without a named approver who has checked the underlying facts.
• Recommended: keep a short written rationale whenever a team departs from the standard approval path.

2Roles, Competence, and Accountability

The communications lead owns the message plan and holds final accountability for public statements. Subject-matter experts in legal, finance, human resources, product safety, and information security provide factual review within their own areas. Spokespeople are responsible for speaking only within approved messages and for declining questions outside their knowledge or authority.

Competence matters because some communications carry regulated or high-stakes content, such as financial results before public release, health or safety claims, personnel matters, or information about minors. Staff who handle such material must complete role-specific training and hold any authorizations their organization requires. Agencies must document their own approval workflows and show that their staff have been trained on the client's policies. This document does not confer any certification, license, or regulator approval.

• Mandatory: assign one accountable owner for every published item and record that owner in the content log.
• Mandatory: restrict access to embargoed financial, legal, or personnel information to named individuals.
• Recommended: require media training before any executive speaks to press or appears on camera.

3Realistic Hazards and Risk Assessment

Communications work rarely involves physical danger, but its harms are real and can be serious. The main hazards include publishing inaccurate facts, disclosing confidential or market-sensitive information early, misrepresenting a product or endorsement, exposing personal data, infringing copyright, amplifying harassment, inflaming a developing crisis, and placing creators or employees at risk of online abuse or doxxing. Event, filming, and product demonstration work adds physical hazards such as trips, crowd crush, overloaded power circuits, unsecured rigging, and unsafe travel to remote locations.

Rate each activity by likelihood and severity using a simple three-level scale of low, medium, and high. Examples of high-risk items include any material financial disclosure, any statement about a death or serious injury, any use of images of minors, any campaign making health, safety, or environmental claims, and any response to an active threat against a person. High-risk items require a second review and documented sign-off from legal or the relevant subject-matter expert before release.

• Common activities: press releases, media interviews, social posts, influencer briefs, event filming, internal town halls, and crisis holding statements.
• Common risk drivers: time pressure, reliance on unverified sources, and use of personal accounts for company business.
• Reassess risk when facts change, when a story gains rapid traction, or when a spokesperson's approval scope changes.

4Preventive Controls and Safe Practices

Verification comes first. Every factual claim needs a source record, a named owner, and a retained version history showing who approved each change. Claims about performance, safety, environmental benefit, or health should be backed by evidence held in a claims file. Avoid superlatives and comparative claims unless the supporting evidence is specific, current, and reviewed by legal. Wording that implies an endorsement, certification, or award must be checked against the actual status before publication.

Consent and rights govern every image, quote, testimonial, and personal story. Obtain written permission before publishing identifiable people or customer stories. Where local law requires notice before recording an interview or filming a person, provide that notice and confirm it was given. Minors require guardian consent and additional review. Confirm copyright and licensing for photographs, music, fonts, illustrations, and user-generated content before use, and keep the license with the asset. Rules on consent, recording, and image rights vary by jurisdiction and must be verified with counsel.

• Mandatory: log the source, owner, and permission status for every image, quote, and testimonial.
• Mandatory: disclose paid relationships and sponsored content as required by applicable advertising rules and platform policies, verifying those rules for each market.
• Mandatory: do not make claims about competitors that cannot be substantiated.
• Recommended: use a claims checklist and retain the approved version of every statement.
• Recommended: prepare responses to likely questions in advance to reduce improvised comments.

5Platform Rules, Reputational Risk, and Creator Safety

Platforms change their terms, advertising policies, promotion rules, and content standards frequently. Teams must check current platform terms before launching campaigns, boosting posts, running contests or giveaways, or using automated scheduling and moderation tools. Violations can lead to content removal, account suspension, advertiser disputes, or legal exposure. Confirm current versions directly with each platform and with counsel rather than relying on memory or older guidance.

Creator and audience safety deserves equal attention. Influencers, employees who post publicly, and community moderators can face harassment or threats after a campaign or statement. Before launch, assess foreseeable backlash, agree on reporting paths, and give creators clear guidance on protecting personal information. Never ask a creator to publish a home address, daily schedule, or family details. Do not pressure creators into content that places them in danger, and pause any campaign where a creator reports threats or stalking.

• Mandatory: include a brief in every creator agreement covering disclosure, content approval, and the creator's right to decline any unsafe or unlawful request.
• Mandatory: pause and escalate any threat of violence, stalking, or doxxing involving a creator, employee, or spokesperson.
• Recommended: publish a comment moderation plan naming responsible staff and stated response times.

6Workspace, Tools, and Information Safeguards

Physical workspace norms reduce both injury and leaks. For events and shoots, assign a site lead, walk the location before arrival, confirm power loads and cable routes with the venue or a qualified electrician, and keep exits and walkways clear. Lighting stands, rigs, drones, and staging require operators trained to the manufacturer's instructions and any local permit rules. Verify those rules locally. Communications staff should not operate rigging, power equipment, or aircraft unless they are trained and authorized to do so.

Information safeguards matter as much as physical ones. Store drafts, embargoed materials, and contact lists in access-controlled systems. Use multi-factor authentication and unique credentials for shared social and press accounts. Do not paste confidential, personal, or unreleased information into unapproved public or AI tools, and check whether vendor terms allow data retention or training. Apply the minimum necessary principle to personal data and follow retention limits set by privacy counsel.

• Mandatory: use unique credentials and multi-factor authentication on every shared publishing account.
• Mandatory: remove access for departing staff and agencies as soon as their role ends.
• Recommended: keep a site safety record for filming locations, including emergency exits, first aid location, and the nearest emergency contact.
• Recommended: avoid recording screens, whiteboards, or confidential documents during open meetings or filming.

7Incident, Crisis, and Escalation Procedures

A communications incident may be a factual error, a leaked document, a misquoted executive, a harassment wave, a safety event at a venue, or a data exposure. Report it immediately to the communications lead and to the designated legal or security contact. Do not delete posts, reply to critics, or contact media without approval, because deletion can destroy evidence and create new problems. Preserve screenshots, URLs, and any available timing details before taking action.

For physical emergencies, call local emergency services first and follow the venue's emergency plan. Communications staff do not make medical, rescue, or security decisions. For data incidents, follow the organization's breach response procedure and the notification timelines set by applicable law, which vary by jurisdiction and must be verified with counsel. Holding statements should be short, factual, and approved before release.

• Mandatory: issue a holding statement only after approval by the designated authority.
• Mandatory: correct known errors promptly through the same channel as the original, and record the correction.
• Recommended: run a tabletop exercise on crisis messaging at a regular planning interval chosen by the organization.
• Recommended: maintain a contact tree with after-hours contacts for legal, security, executives, and platform support.

8Records, Training, and Continuous Review

Records prove that norms are followed. Keep approval records, claims files, permission forms, creator agreements, incident logs, and final published versions for the retention period set by the organization's records policy and applicable law. Confirm retention obligations with counsel, since some records may need to be kept longer and others deleted under privacy rules.

Training should be role-based and refreshed whenever laws, platform rules, or company policy change. Review these norms after significant incidents and at a regular interval set by the organization. Track useful measures such as corrections issued, approval delays, complaints, takedown requests, and near misses. Use findings to improve workflows and templates rather than to assign blame to individuals.

• Mandatory: record every correction and near miss in the incident log.
• Recommended: hold a short after-action review within a set period after each significant incident.
• Recommended: share lessons learned with agencies, creators, and spokespeople.

Implementation checklist

• Confirm a named owner and approver for every published item.
• Verify each factual claim against a source record before approval.
• Obtain written consent and confirm licenses for images, quotes, and user content.
• Check current platform and advertising rules for disclosure and promotion requirements.
• Review creator briefs for personal data limits and a clear right to decline unsafe requests.
• Secure shared accounts with unique credentials and multi-factor authentication.
• Report incidents immediately and do not delete content or contact media without approval.
• Call local emergency services first for any physical emergency, then follow communications steps.
• Log corrections, near misses, and approvals in the records system.
• Verify legal requirements with counsel and adapt these norms into locally approved procedures.