Despite ‘old rules,’ firms can plumb social media in compliant ways