NIL Post, Doxxing, and Sponsor Pressure

First 90 minutes:

• 0-10: preserve screenshots, URLs, timestamps, and the doxxing post. Do not delete anything. Notify the AD, compliance, legal, the coach, and the sport administrator.
• 10-25: call the athlete privately. Ask if she is safe, tell her not to post again, and tell her to save screenshots. Report the schedule/dorm post to the platform and campus police if there is a threat.
• 25-45: meet with coach and compliance. Decide whether the tweet violates team policy. If it does, handle it as an internal conduct matter, not public shaming.
• 45-90: draft a holding line, but do not post yet unless the department account is being flooded with misinformation. Set a 2 p.m. check-in. Risks: deleting her post is not yours to do and creates a Streisand effect; replying from the department amplifies the joke and looks like a pile-on; ignoring is acceptable for 90 minutes but not for 24 hours; a statement too early locks you into facts you do not have. The doxxing is the urgent safety issue, not the joke. Separate the two: protect the student first, then address the tone and the sponsor.

Public: 'We are aware of a student-athlete's personal social media post. It does not represent the values of our department. We are addressing the matter directly with the student-athlete and her team. We also ask that personal information about any student not be shared. We will have no further comment while we handle this internally.' Must: separate personal speech from institutional voice, show values, protect privacy, and avoid repeating the joke. Must not: announce discipline, call her embarrassing, or confirm an investigation. Private: 'I am checking on you. The post is getting attention and people are posting personal information. Are you safe? Please do not engage, and do not delete yet; save screenshots. We need to meet with compliance and your coach at 10. This is about the post, not your worth. I cannot promise no consequences, but I can promise you will hear the process from us first.' Must: care, safety, agency, and confidentiality. Must not: negotiate discipline, shame her, or ask her to delete evidence. The difference is purpose: the public message lowers the temperature and protects the department; the private message protects the person and preserves trust. Sending the same message to both would be either cold to the athlete or too detailed for the public.

Reply by 8 a.m.: 'Thank you for flagging this. We are aware and reviewing. We cannot control a student-athlete's personal account or ask her to delete a lawful post. We can review the campaign and our brand-safety process with you.' Do not promise to make it go away. Separate the NIL deal, which compliance says is permissible, from the tone of the post, which is a team-policy matter. Do not disclose student conduct. Offer a 10 a.m. call with the AD. Options: pause paid promotion, remove department tags, and agree on a joint statement if the sponsor wants distance. Check the contract for a morals or termination clause, but do not invoke it without legal. If the sponsor threatens to pull funding, document it and escalate; do not trade the athlete's due process for the sponsorship. Why not order deletion: it is not your account, it may violate policy, and it creates a cover-up narrative. Why not ignore: the sponsor is local and the AD is copied. After the acute phase, update the social policy with examples, train athletes on sponsored posts, and add 24-hour monitoring during campaigns. The goal is brand safety without throwing the student to the crowd.