firms increasingly rely on employees' social media information for screening and monitoring, suggesting that these practices may play an important role in managing human-capital-related firm risks. exploiting the staggered enactment of state-level social media privacy laws (smpls) in a difference-in-differences design, we find consistent evidence that restrictions on these practices increase firms' risks, as the cost of equity rises by 43.4 basis points. the effect is more pronounced among firms where employee-related risks and labor adjustment frictions are likely more salient, including those with higher growth, greater reliance on skilled labor, greater exposure to talent retention risk, and higher vulnerability to cybersecurity risks. additional analyses further support these mechanisms, as smpl enactment is associated with higher systematic return volatility, weaker accounting performance, and more data leakage incidents. overall, our findings highlight the use of employees' social media information as a risk-management tool in employee selection and oversight.