Rules
What does a social media crisis response plan need for US brands?
A social media crisis response plan US brands can use needs a severity ladder, legal review triggers, and a named after-hours approver for public posts.
What to take away
- A US social media crisis response plan needs a severity ladder, a legal review trigger, and one named approver for public statements.
- The first holding statement should be ready in 2-4 hours, with legal review inside 1-2 hours after facts are confirmed.
- State attorneys general and the FTC treat social posts as advertising, so disclosure and contest rules belong in the plan.
- A plan should connect to the social media strategy explained for business teams, because approval paths shape daily publishing.
- The most common failure is a delayed approval that stretches a 30-minute problem into a three-day story.
Stage by stage
Most US brands can build a workable crisis response structure in three stages over four to six weeks. Each stage ends with a document that a social manager, legal counsel, or outside agency can use without asking who owns the next step.
| Stage | Duration | Required output |
|---|---|---|
| Intake and severity map | 1-2 weeks | A one-page severity ladder with examples from the brand's own channels |
| Legal and disclosure review path | 2-3 weeks | Approved response templates and a named after-hours reviewer |
| Live drill and revision | 1 week | A dated drill report with fixes assigned to roles |
The severity ladder must define four levels: routine complaint, public criticism, press inquiry, and regulator contact. Each level gets a response time. Routine complaints can wait one business day. Regulator contact starts a legal review within 60 minutes.
What has to exist before what
The severity ladder must exist before legal reviews any response template. Without agreed levels, counsel cannot tell a routine complaint from a regulatory matter. That is a blocker, not an administrative step.
A named after-hours reviewer has to exist before the team publishes a holding statement outside 9 to 5 Eastern. The blocker is simple. If no one with authority answers within 30 minutes, the social team either stays silent or posts something legal later pulls.
If the incident involves a data breach, follow the FTC data breach response guide before posting public details.
The team also needs a community boundary so that replies, direct messages, and public comments have a defined scope. Choosing a community boundary comes before picking any platform to build on, and it tells the crisis team where to look first.
Where it stalls
The named failure mode is the silent weekend. The cause is a plan that lists roles but not coverage. When a post goes wrong at 7 p.m. on Friday, the approver is offline and the social lead will not publish without sign-off. The result is a 60-hour gap that reporters fill.
A second stall is disclosure drift. A contest or paid partnership response gets written quickly, then legal finds a missing material connection. For paid partnerships, keep the creator contract and disclosure history in one place. An influencer campaign record should be created before outreach even starts so crisis review has a source of truth.
A third stall is legal review without a facts log. If the social team cannot show the exact post, time, and account, counsel may ask for a full platform export. That export can take 3-5 business days and delays the public response.
What to do while waiting
While legal reviews the draft, the social team can do four things.
- Freeze scheduled posts for the affected brand or campaign.
- Capture screenshots and timestamps before edits or deletions.
- Draft a holding statement with confirmed facts only and leave blanks for legal.
- Route customer service questions to a single inbox.
Example of a two-hour holding statement
We are aware of a post on our account that does not meet our standards. We removed it at 3:15 p.m. Eastern and are reviewing how it was published. We will share an update within 24 hours.
That statement works because it confirms three facts: the post existed, the brand acted, and a timeline exists for the next update. It avoids speculation about intent, fault, or legal liability. Legal review for this level should take 1-2 hours, not two days.
After the drill, the social media management workflow should show what to keep and what to drop. A plan that adds ten approval steps will fail on a Saturday. A plan with three steps and a backup approver will survive.
Common questions
Does a US social media crisis response plan need a lawyer on call? Not always, but the plan needs a legal review trigger that names a person or an outside firm. The trigger should fire for regulator contact, press inquiries, and any statement about safety or discrimination.
How often should the plan be tested? Quarterly is practical for most brands. A 45-minute tabletop exercise with the social lead, legal, and one executive covers the main gaps. Update the contacts after any staffing change.
What is the first document to write? Start with the severity ladder. It sets response times and tells the team when to wake up legal. Everything else, including templates and approval paths, depends on those levels.
Can a small brand skip legal review? A small brand can use a simplified path, but it still needs a review step for regulated claims. The FTC advertising FAQs for small business apply to social posts just as they do to print ads.
