# Social Media Investigations in the UK: What Is Lawful and What Holds Up

Source: https://investigationbureau.uk/guides/social-media-investigations-uk
Updated: 2026-10-13

A social media investigation is the structured collection and analysis of what a person or business has put into public view online, captured so that a court, a tribunal or an insurer can rely on it. One rule makes it lawful: it uses only what is genuinely public, captures it with its context, and obtains nothing by deception.

Read properly, that public record can confirm or undermine a sick note, an injury claim or a story told in a divorce. Gathered the wrong way, it is worthless and can expose whoever commissioned it.

The first conversation is free and confidential. [Send a confidential enquiry](https://investigationbureau.uk/contact) and we reply within one working day.

## Who uses social media investigations

- **Employers** checking whether an employee on sick leave is working elsewhere, or whether a public post has broken a confidentiality clause.
- **Insurers and their solicitors** testing an injury claim against what the claimant is publicly doing.
- **Family-law clients** gathering evidence about conduct, lifestyle or contact arrangements.
- **Litigants** who need to show what someone said, sold or did before the post is deleted.
- **Businesses checking a counterparty** whose public footprint does not match the pitch.
- **People being harassed or impersonated**, who need the material preserved before it disappears.

## What counts as public and what does not

Public means visible to anyone who looks, without logging in as a friend, follower or member: a post set to everyone on Facebook, an open Instagram or TikTok profile, a LinkedIn career history, a business page, a comment under a news story. All of that can be captured.

Private means anything the platform restricts to a chosen audience: friends-only posts, closed groups, direct messages, a locked account. Reachable is not the same as public. If a friend of the subject shows you a friends-only post on their phone, you have seen it, but an investigator who engineered that view has crossed a line.

## The lines you cannot cross

Four limits define a lawful social media investigation in the UK. If you had to pretend to be someone else to see it, it was never public.

- **No fake profiles.** An account in a false name, used to befriend the subject or join their closed group, is deception, and anything it produces is tainted.
- **No private content under false pretences.** Asking a colleague or relative to pass on private posts, or misrepresenting who is asking, is obtaining personal data by deception: an offence under section 170 of the Data Protection Act 2018.
- **No logging in to anything that is not yours.** Using a partner's saved password or a guessed login to read someone's messages is unauthorised access under the Computer Misuse Act 1990.
- **No monitoring that becomes harassment.** Watching a public profile for a defined purpose and a limited time is investigation. Watching it indefinitely, or making sure the subject knows, can be a course of conduct under the Protection from Harassment Act 1997.

They apply to you as much as to any investigator you instruct.

## How evidence is captured so it holds up

A phone screenshot shows what someone saw at one moment. For evidence, the capture has to carry its own provenance.

- **Timestamps.** The time of capture and the time shown on the post, both recorded.
- **Full context.** The whole post, the account, the audience setting, the comments around it and the page it sat on.
- **The method recorded.** How the page was reached, from what kind of session, and with what tools.
- **Who captured it and when.** A named investigator who can give a statement about what they did.
- **Preserved so it can be checked.** Original files kept unaltered, with their hashes, so that someone who was not there can confirm what was captured.

Our capture tools are built in-house and log every action against the investigator's name: that log is the chain of custody. Our guide on [whether private investigator evidence is admissible in court](https://investigationbureau.uk/guides/is-private-investigator-evidence-admissible-in-court) covers what a court does with it.

## Employers and sick leave or second jobs

The typical instruction: an employee is signed off, and there are reports that they are working elsewhere. Social media is usually the first step, and our guide on [an employee working a second job while off sick](https://investigationbureau.uk/guides/employee-working-a-second-job-while-off-sick) sets out the rest.

Three things make it defensible. It must be proportionate: a specific concern, a defined scope and a short window, not a standing watch on staff profiles. It needs a documented lawful basis under UK GDPR, recorded before the work starts. And the material is one part of a fair process, not the whole case: the Acas code of practice expects the employer to put the evidence to the employee and hear the answer before deciding. A public post is a reason to ask a question, not a substitute for asking it.

We handle these through our [workplace investigation service](https://investigationbureau.uk/services/workplace), and will say so if what you describe does not justify looking.

## Insurers and claimants

A claimant who says they cannot lift, drive or leave the house, and who posts a weekend of fell walking, has a problem. Public posts that contradict a claimed injury are legitimate evidence.

The caution is as important. A single photo proves little: people post their good days, and a picture may be old or show a moment of effort that cost two days in bed. What carries weight is a pattern, dated activity over weeks that is inconsistent with the claim, presented with its sources and gaps and a plain statement of where it is ambiguous.

## Family proceedings

In divorce, financial remedy and children cases, public social media can show conduct, lifestyle and contact arrangements: a parent's claimed income against their public spending, a new partner at the home, a child at an event the other parent was told they missed. Family courts take a dim view of intrusion and of evidence gathered to humiliate, so discretion matters. We keep the scope to what the issue requires and leave out children's images and anything irrelevant to your solicitor's question.

## What a report looks like

A short written report that keeps what was found separate from what it means. Each capture is numbered, dated and cited to its source, with the account and audience setting noted. A method section explains how the material was reached, and a summary sets out what it shows, what it does not, and how confident we are. The originals go in a separate bundle with the investigator's statement. If nothing public helps you, the report says so and the fee reflects it.

Investigation Bureau is registered with the ICO as a data controller (ZC259849), and every instruction is processed under a documented lawful basis.

## Cost

Social media investigation is desk-based work, and in the UK market it starts from a few hundred pounds for a defined check on one subject. Attribution of an anonymous account or a report prepared for trial costs more. After a free, confidential first conversation we give you a fixed quote in writing before any work begins, and most instructions are delivered within days. As one strand of a wider [OSINT investigation](https://investigationbureau.uk/services/osint-investigations), it is quoted as part of the whole.

## Frequently asked questions

### Can an employer look at an employee's social media?

Yes, where the material is public, there is a specific reason, the check is proportionate and the lawful basis is documented. An employer cannot befriend the employee under a false name or ask a colleague to pass on private posts. What is found should be put to the employee as part of a fair process, not acted on in silence.

### Can a private investigator see private profiles?

No, and anyone who says they can is describing something unlawful. The only lawful routes to a locked account, a friends-only post or a direct message are the subject's consent, a court order served on the platform through your solicitor, or disclosure in proceedings. A good investigator works from the public record and builds the evidence for that application.

### Is social media evidence admissible in a UK court?

Generally, yes, provided it is relevant and was obtained lawfully. Courts and tribunals weigh captures by how well their origin can be shown. Material that cannot be dated, has been edited, or came through a fake profile carries little weight and may be excluded. Our guide on [whether private investigator evidence is admissible](https://investigationbureau.uk/guides/is-private-investigator-evidence-admissible-in-court) goes through the tests.

### Can you find out who is behind a fake account?

Often, and sometimes not. Reused usernames, recycled photographs, writing habits and the traces a careless operator leaves can tie an account to a person from public sources alone. A careful operator can defeat all of that, and when they do we say so rather than keep billing. Where attribution depends on data only the platform holds, the route is a court order through your solicitor. Our guide on [who is behind an anonymous account](https://investigationbureau.uk/guides/who-is-behind-an-anonymous-account) explains the work.
