OAE Business Education study materials
OAE Business Education study resources

Internship Confidentiality and the Social Media Post

OAE Business Education · Put your knowledge to work in context.

All case studies

Internship Confidentiality and the Social Media Post

At a regional career center, a 17-year-old student named Jordan is placed in a 12-week unpaid internship at a small accounting firm. The placement agreement requires confidentiality and professional conduct. In week five, Jordan's supervising accountant sees that Jordan posted a photo on a private Instagram story showing a client's tax form on a desk; the caption jokes about 'adulting.' The firm's owner wants to end the internship immediately and asks the school coordinator to remove Jordan from the program. Jordan says the account has only 60 followers and the post was deleted after 20 minutes. The coordinator must respond within 24 hours, protect the client, preserve due process for the student, and decide whether the placement can continue. Jordan has otherwise received positive performance notes and needs the internship hours for program completion. The firm has no written social-media policy for interns, only a general confidentiality clause.

1. What immediate actions should the coordinator take in the first 24 hours? Prioritize them and explain the legal or ethical rationale for each.

Read the worked answer

First, confirm that the post is deleted and preserve evidence, such as a screenshot and the time it was posted. The coordinator should not ask the student to delete evidence beyond the post itself. Second, notify the firm owner and the school's work-based learning administrator in writing. The client's confidentiality is the highest priority, so the firm must assess whether any client data was actually exposed and follow its own privacy and breach procedures. Third, contact Jordan and the guardian to explain the seriousness of the situation and to schedule a meeting. Do not promise confidentiality or minimize the issue.

The coordinator should review the placement agreement, the district's work-based learning policy, and any state requirements. The coordinator should not give legal advice; if client data was sensitive or the firm's policy requires notification, the firm should consult its own counsel. Due process requires written notice of the concern and a chance for Jordan to respond. Immediate removal may be necessary only if the client or firm remains at risk. Otherwise, suspend workplace access to client documents pending the meeting. Document all steps factually.

2. Recommend whether Jordan should be removed from the placement, with conditions if applicable. Address confidentiality, due process, and the firm's lack of a social-media policy.

Read the worked answer

Immediate termination is defensible only if the breach was serious, repeated, or the firm cannot supervise Jordan safely. On these facts, the post was deleted quickly, the audience was small, and Jordan has positive performance notes. The firm's lack of a written social-media policy does not erase the confidentiality duty in the placement agreement, but it does affect fairness: Jordan was not given specific rules about phones or client documents. I would recommend a structured remediation rather than automatic removal.

Conditions: a written apology to the firm, a signed confidentiality and social-media agreement, retraining on client privacy, a ban on personal phones in work areas, supervised access to client files for the remaining weeks, and a probation period with a progress check. The coordinator should hold a meeting with Jordan, the guardian, and the firm supervisor; give Jordan the specific allegations in advance; and allow a response. If the firm still wants removal, the coordinator should document the reasons and help Jordan find an alternative placement so program completion is not unfairly blocked. The decision should be proportionate and consistent with the placement agreement.

3. What instructional follow-up should the business education program provide after the incident? Describe a specific activity and how it connects to employability standards.

Read the worked answer

The program should provide a short, mandatory workshop on confidentiality and digital professionalism for all interns, not just Jordan. Activity: give teams a set of realistic workplace photos and captions-client documents, a whiteboard with figures, a coworker's desk, a company laptop screen-and ask them to sort each into 'never post,' 'post only with written permission,' or 'generally safe.' Teams must cite a workplace policy or confidentiality principle for each decision. Then each student writes a personal social-media rule for the internship and a plan for separating personal and professional accounts.

This connects to employability standards such as professionalism, legal and ethical responsibilities, confidentiality, and appropriate use of technology. It also gives the coordinator a formative assessment: students can explain why a private account with 60 followers is still public enough to harm a client. The workshop should include a brief review of the placement agreement and a clear reporting procedure for mistakes. The message should be restorative: the goal is to learn to protect client information, not to shame one student. All interns should sign the updated agreement.