Home > School cybersecurity > CIPA for E-Rate
CIPA compliance for E-Rate: filtering, policy and proof
If your school or library gets E-Rate discounts for internet or Wi-Fi equipment, the Children's Internet Protection Act (CIPA) applies. It comes down to three things you must have in place and be able to prove. Here is what each one means and how we set it up and keep the records for you.
The short answer
- CIPA applies when you receive E-Rate discounts for internet access, Wi-Fi and network equipment, or their maintenance. Telecommunications only (phone lines) does not trigger it.
- You need three things: a written internet safety policy, a technology protection measure (a content filter) on every computer with internet access, and a public notice and meeting on the policy.
- You certify CIPA compliance on FCC Form 486 each funding year.
- You must be able to prove all of it later, so keep the records for at least 10 years.
- We install and manage the filtering, export the reports and help you assemble the proof.
Requirement 1: an internet safety policy
Your board or governing authority adopts a written policy. It must address:
- Access by minors to inappropriate material on the internet.
- The safety and security of minors using email, chat rooms and other direct electronic communication.
- Unauthorized access, including hacking, and other unlawful activity by minors online.
- Unauthorized disclosure, use and sharing of minors' personal information.
- Measures that restrict minors' access to material harmful to them.
- Schools also: monitoring minors' online activities, and teaching students about appropriate online behavior, including on social media, in chat rooms and cyberbullying awareness and response.
Requirement 2: a content filter (technology protection measure)
The filter must block or filter internet access to visual images that are obscene or child pornography, and, for minors, images that are harmful to minors. It must be in place on every computer with internet access, including staff and library computers. An authorized adult may disable it for an adult doing bona fide research or other lawful work.
Requirement 3: public notice and a meeting
Before adopting the policy, you give reasonable public notice and hold at least one public hearing or meeting about the policy and the filter. For a private or parish school, notice to your own community, such as parents, is enough. Keep the notice, the agenda and the minutes.
What reviewers and auditors ask for
| They ask | You show |
|---|---|
| Your internet safety policy | The adopted policy with the date |
| Proof of public notice | Bulletin, website post, newsletter or email to parents |
| Proof of the meeting | Agenda and minutes showing the policy was discussed |
| Proof the filter was in place | Filter subscription invoice, settings screenshots and activity reports |
| Proof of online safety teaching (schools) | Lesson plans, assemblies or curriculum notes |
Common gaps we find
- The filter covers the student Wi-Fi but not staff, office or library computers.
- Guest Wi-Fi in the parish hall or gym runs through the same internet with no filter.
- Filter subscription expired and nobody noticed.
- The policy exists but there are no meeting minutes to prove it was addressed.
- Reports were never saved, so there is no proof for past years.
How WENO handles CIPA for you
Questions people ask
Do Catholic and private schools have to follow CIPA?
Yes, if they receive E-Rate discounts for internet access or internal connections. The public notice can go to your own school community.
Does CIPA require us to block social media?
No. CIPA requires filtering of specific visual content and a policy that addresses online safety. What else you block is your decision.
Do we need a new public meeting every year?
Generally no. Once a compliant policy has been adopted after public notice and a meeting, a new hearing is not usually required unless your own policy calls for it.
Can a teacher turn off the filter?
An authorized person may disable it for an adult doing bona fide research or other lawful purposes. Students stay filtered.
Sources
General information, not legal advice. Your E-Rate consultant or counsel can confirm requirements for your funding requests.