CIPA Internet Safety Policy: What Schools and Libraries Need to Know to Protect E-Rate Funding
Schools and libraries receiving E-Rate discounts for Internet access or internal connections must comply with the Children’s Internet Protection Act (CIPA). A key requirement is having an adopted and enforced Internet Safety Policy that meets federal requirements.
Failing to meet these Internet Safety requirements can put E-Rate funding at risk, making compliance an important part of your overall E-Rate responsibilities.
Key Takeaways
- CIPA applies when a school or library receives E-Rate discounts for Internet access or internal connections. Entities funded only for telecommunications services are exempt, according to USAC.
- The policy needs a technology protection measure, coverage of five required topics, public notice, at least one public hearing or meeting, and enforcement.
- Schools have two obligations libraries do not: monitoring minors’ online activities and educating students about appropriate online behavior and cyberbullying.
- Compliance is certified on FCC Form 486 (or Form 479 for consortium members), and the audit file should prove both adoption and day-to-day operation.
- School-owned devices must be filtered wherever students use them, including off campus.
Table of Contents
Who Needs a CIPA Internet Safety Policy?
CIPA applies to schools and libraries receiving E-Rate discounts for:
- Category One Internet access
- Category Two internal connections and related eligible services
To remain eligible for applicable E-Rate funding, schools and libraries must adopt and enforce an Internet Safety Policy, implement a technology protection measure (Internet filter), and certify compliance with the program requirements.
What Must an Internet Safety Policy Include?
CIPA requires an Internet Safety Policy that addresses several areas of online protection, including:
- Restrictions on minors’ access to inappropriate Internet content.
- Online safety when using email, chat rooms, and other electronic communications.
- Prevention of unauthorized access, hacking, and other unlawful online activities.
- Protection of minors’ personal information.
- Restrictions on access to materials harmful to minors.
Schools have two additional responsibilities:
- Monitoring minors’ online activities.
- Educating students about appropriate online behavior, social networking, and cyberbullying awareness and prevention.
Both schools and libraries must also have an appropriate Internet filtering system, formally adopt their policy following public notice and a public hearing or meeting, and enforce the policy.
CIPA Certification and E-Rate Filing Requirements
Internet Safety compliance must also be certified through the E-Rate application process. Schools and libraries must ensure the appropriate certifications are completed and submitted as required. Missing or incorrect certifications can create unnecessary compliance issues and put funding at risk.
Documentation and Ongoing Compliance
Meeting CIPA requirements involves more than adopting an Internet Safety Policy. Schools and libraries must also maintain documentation demonstrating that their policies and required protections are in place and being enforced.
Important records include:
- The adopted Internet Safety Policy.
- Evidence of public notice and hearing or meeting minutes.
- Documentation of the technology protection measure and filtering system.
- Records supporting ongoing compliance.
- Applicable FCC Forms certifying CIPA.
Policies and procedures should also be reviewed periodically to ensure they reflect current technology, filtering practices, and E-Rate program requirements. School-owned devices must also maintain appropriate filtering protections when used off campus.
Visit e2eexchange.com to get started.
Frequently Asked Questions
Does every school and library need a CIPA Internet Safety Policy?
CIPA applies to schools and libraries receiving E-Rate discounts for Internet access or internal connections. Entities receiving funding exclusively for telecommunications services are exempt.
Do schools have additional Internet Safety responsibilities?
Yes. Schools must include monitoring of minors’ online activities and education about appropriate online behavior, including social networking and cyberbullying awareness through their Internet Safety policy.
Sources
-
- CIPA, Universal Service Administrative Company
- Children’s Internet Protection Act (CIPA), Federal Communications Commission
- E-Rate: Schools & Libraries USF Program, Federal Communications Commission
- FCC Form 486 User Manual, USAC
- E-Rate News Brief, May 19, 2022, USAC
- Documentation for audits, USAC
- FCC Adopts Rules to Enhance the Integrity of the E-Rate Program
- FCC to End Unlawful Inclusion of School Bus Wi-Fi Through E-Rate