Most employers have a policy of not allowing discussion of their policies in public - mine certainly does - but I've always thought that is unenforceable.  Surely discussing policies in abstract (without mentioning the actual employer) is fine?