Children's Internet Protection Act CIPA
- 1st Amendment
CIPA requires that schools and libraries that receive specific federal funds (ie ERate) must certify to the funding agency that they have in place an Internet Safety Policy. Such a policy should use technology that blocks access to obscenity, child pornography, or material harmful to minors. It may also include monitoring of children as they are online. Congress also wants the Internet Safety Policy to address hacking, chat rooms, e-mail safety, disclosure of personal information concerning children, and unlawful activities of children online.
Who Must Comply
- Schools and libraries that receive federal funds (must be a recipient, not an applicant)
- Used for Internet access
- From the FCC's e-rate program or (47 USC § 254 (h), § 254(l)) See 47 CFR 54.520.
- If a school or library does not receive e-rate funds, then
Internet Safety PolicyAn Internet Safety Policy is required to receive funding under all of the above programs.
E-Rate Recipients Only: Public Hearing
E-rate recipients hold at least one public hearing during which concerns over the policy can be vetted. Schools 47 USC § 254(h)(5)(A)(iii), Libraries § 254(h)(6)(A)(iii).
Internet Safety Policy Content
The Policy must consider and include the following:
- With respect to adults and minors
- the operation of a technology protection measure with respect to any of its computers with Internet access that protects against access through such computers to visual depictions that are—
E-rate schools, minors 47 USC § 254(h)(5)(B)(i), E-rate schools, adults 47 USC § 254(h)(5)(C)(i); libraries, minors 47 USC § 254(h)(6)(B)(i); libraries, adults 47 USC § 254(h)(6)(C)(i); Schools under Education Act Sec. 3601(a)(1)(A)(i), Libraries under Museum and Libraries Act 20 U.S.C. 9134(f)(1)(A)(i).
Operation of the Technology
105-226 Internet Filtering Systems: Report to the Committee on Commerce, Science, and Transportation on S.1619 (JUNE 25, 1998) ("Schools and libraries can tailor the filtering or blocking systems to meet the standards of their local communities. Authorities can select what key words and phrases, if any, they wish to filter or block. They are able to add and delete Web sites to the database of unapproved sites. They can select system providers whose standards of filtering most match the standards of the local community. Finally, they can temporarily turn off the filtering or blocking system when it is appropriate to do so and the governmental interest would still be met.")
105-226 Internet Filtering Systems: Report to the Committee on Commerce, Science, and Transportation on S.1619 (JUNE 25, 1998) ("The phrase `a system to filter or block' is intended to provide maximum discretion to the certifying authority in its selection of such a system. The selection is not intended to be limited to software-based systems, but it is intended to encompass all technologies available now and as technology develops. ")
E-rate schools only
E-rate only § 254(l)
- access by minors to inappropriate matter on the Internet and World Wide Web;
- the safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications;
- unauthorized access, including so-called `hacking', and other unlawful activities by minors online;
- unauthorized disclosure, use, and dissemination of personal identification information regarding minors; and
- measures designed to restrict minors' access to materials harmful to minors
The Internet Safety Policy shall be determined by the local authority.
105-226 Internet Filtering Systems: Report to the Committee on Commerce, Science, and Transportation on S.1619 (JUNE 25, 1998) ("the determination of what constitutes material deemed to be inappropriate for minors shall be made locally by the school or library seeking certification.")
The Federal government (FCC) shall not establish criteria for or review the determinations made by the local authorities. 47 USC 254(l)(2).
105-226 Internet Filtering Systems: Report to the Committee on Commerce, Science, and Transportation on S.1619 (JUNE 25, 1998) ("Under S. 1619, the government is expressly banned from prescribing what material constitutes `matter deemed to be inappropriate for minors.' It is expected that the school and library authorities that install the filtering or blocking systems will clarify and make concrete this standard according to their local community's norms. S. 1619 places the determination of what material is inappropriate for minors in the hands of the local school or library authorities, which are best equipped to make that determination based on their knowledge of the local community and their traditional role of acting in loco parentis." - "New section 254(l)(4) provides that the determination of what matter is inappropriate for minors shall be made by the school, school board, library, or other authority responsible for making the required certification. No agency or instrumentality of the United States Government may: (A) establish criteria for making that determination; (B) review the determination made by the certifying school, school board, library, or other authority; or (C) consider the criteria employed by the certifying school, school board, library, or other authority in the administration of universal service assistance.")
“Obscenity” is relatively easy. This is material that is completely off the scale. Obscenity has never had constitutional protection and remains illegal under several laws, including, interestingly enough, the Communications Decency Act. It is also illegal under Department of Justice statutes. See 18 USC § 1460. According to the Supreme Court’s Miller test:
The test for obscenity is (a) whether the average person, applying contemporary community standards would find that the work, taken as a whole, appeals to the prurient interest; (b) whether the work depicts or describes, in a patently offensive way, sexual conduct specifically defined by the applicable state law; and (c) whether the work, taken as a whole, lacks serious literary, artistic, political, or scientific value.
It is this requirement that obscenity be judged by community standards that led Congress to require the local hearing. In addition, a key to the test is that the material must lack any value. So here is a pop test: would the Ken Starr Report to Congress on President Clinton, Monica Lewisnky and cigars fall within the definition of obscenity? (Answer: of course, as the Report lacked any serious political value.)
Child pornography, likewise, is illegal and not constitutionally protected. This is defined as visual depictions of sexually explicit conduct of minors. The specific definition is set forth in 18 USC § 2256. (Note: the Child Pornography Prevention Act has been declared unconstitutional. This Act would have made not only actual images of children illegal but also artificial images of children - in other words computer generated images - illegal. The Supreme Court has agreed to review this case).
Material that is “harmful to minors” is defined by CIPA essentially the same as obscenity, except with the addition that this judgment must be made “with respect to minors.” Thus, it is not just that it lacks political value generally, but it must lack political value with respect to minors.
See Definitions Education Act Sec. 3601(a)(5), Museum and Library Act 20 USC 9134(f)(7), E-rate 47 USC 254(h)(7).
An authorized individual may disabled the technology protection measures for adults in order to enable bona fide research or “other lawful purposes.” See Definitions Education Act Sec. 3601(a)(3), Museum and Library Act 20 USC 9134(f)(3), E-rate 47 USC 254(h)(5)(D), 254(h)(6)(D).
- See Children's Internet Protection Act (CIPA) and Form 486, Universal Service Administration Corporation (July 26, 2001).
- Schools and libraries using e-rate funds for Internet access must certify to the FCC that
- is enforcing an Internet Safety Policy under § 254(h). E-rate schools, minors 47 USC § 254(h)(5)(B), E-rate schools, adults 47 USC § 254(h)(5)(C); libraries, minors 47 USC § 254(h)(6)(B)(i); libraries, adults 47 USC § 254(h)(6)(C)(i); 47 USC 254(h)(5)(E); 47 USC 254(h)(6)(E).
- it has adopted and implemented an Internet Safety Policy under § 254(l). 47 USC 254(h)(5)(A)(i)(II) and 47 USC 254(h)(6)(A)(i)(II)
- The additional requirements come from CIPA Sec. 1732 codified as § 254(l). 47 USC 254(h)(5)(A)(i)(II) and 47 USC 254(h)(6)(A)(i)(II) requires that schools and libraries certify adoption and implementation of an Internet Safety Policy under CIPA Sec. 1732 codified as 47 USC 254(l). The trick is that 47 USC 254(h) has a specific timing and certification process while 47 USC 254(l) does not. Non-compliance with either results in ineligibility but the procedure for compliance with one is specified where the procedure for the other is not. This ambiguity will have to be resolved.
- USAC Forms "For the purpose of CIPA, certifications are made either on FCC Form 479 or FCC Form 486 depending on whether the Administrative Authority is also the Billed Entity:"
- Schools not using e-rate, but receiving funds under Title III of the Elementary and Secondary Education Act of 1965 (20 U.S.C. 6801 et seq.) for Internet access must certify that it has in place and is enforcing an Internet Safety Policy. Schools under Education Act Sec. 3601(a)(1)(A)(i); Education Act Sec. 3601(a)(2)(B)
- Libraries not using e-rate, but receiving funds under Section 224 of the Museum and Library Services Act (20 U.S.C. 9134(b)) for Internet access must certify that it has in place and is enforcing an Internet Safety Policy. Libraries under Museum and Libraries Act 20 U.S.C. 9134(f)(1)(A)(i).
- Timing: Certification must be made
- First Funding Year: As part of the application process for the next program funding year under this Act following the April 21 of
- Compliance or
- it is undertaking such actions, including any necessary procurement procedures, to put in place an Internet safety policy and technology protection measures and will be in compliance.
- Subsequent Years: during each annual program application cycle under this Act
- Second Funding Year Certification of
- Compliance or
- Notify to the the Director of the Institute of Museum and Library Services that state or local procurement rules or regulations or competitive bidding requirements prevent the making of the certification. Such notice shall certify that the school will be brought into compliance before the start of the third program year after the effective date of this section in which the school is applying for funds under this title.
- Libraries under Museum and Libraries Act 20 U.S.C. 9134(f)(4).
- IMLS: Update on the Childrens Internet Protection Act July 8, 2002
- Note that school libraries can apparently qualify for LSTA funds and must in that case comply with CIPA.
Social Networks and Cyber Bullying (Fall 2008)
The Broadband Data Improvement Act Title II: Protecting Children in the 21st Century Act, passed in the fall of 2008, added a new educational requirement to CIPA: A school or library must certify that
`(iii) as part of its Internet safety policy is educating minors about appropriate online behavior, including interacting with other individuals on social networking websites and in chat rooms and cyberbullying awareness and response.'
Released: 11/14/2012. WIRELINE COMPETITION BUREAU PROVIDES GUIDANCE FOR SCHOOLS IMPLEMENTING THE PROTECTING CHILDREN IN THE 21ST CENTURY ACT. (DA No. 12-1836). (Dkt No 02-6 09-51 ). WCB . Contact: Cara Voth at 7400, TTY: 0484 TXT
Q1: What should schools include in their Internet safety policies, and what documents should schools retain to demonstrate compliance with the requirement to educate minors about appropriate online behavior?
A: It is sufficient for a school’s Internet safety policy to specify that the school educates its students about appropriate online behavior. A school is not required to provide details about the curriculum, trainings or other educational programs it has chosen in the Internet safety policy itself.4 Although the FCC does not require schools to specify curriculum in their Internet safety policies, they should keep records of the implementation of their chosen method(s) for educating minors about appropriate online behavior. For example, a school could maintain an annual list of the curriculum, trainings, or other programs provided to its students.
Q2: Are schools receiving E-rate discounts for Internet access and/or internal connections required to provide education about appropriate online behavior to their students every year?
A: The Protecting Children in the 21st Century Act requires a school to certify, as part of its Internet safety policy, that it “is educating minors about appropriate online behavior.” Neither the statute nor the FCC’s rules, however, specify how often a school must provide education regarding appropriate online behavior. While we do not read the statute to require annual trainings, curriculum or online behavior education programs, the phrase “is educating” in the statute suggests some form of regular training. Therefore, schools should determine how frequently they will provide educational programs or curriculum by evaluating local or community needs, and should retain documents demonstrating the frequency with which they provide their students with such programs or access to such curriculum.5 For example, a school might decide to provide training about appropriate online behavior to its students when they first start using the Internet and then every other year that follows.
Q3: Do schools need to ensure the education of every student in order to be able to certify they are educating minors about appropriate online behavior?
A: Schools should provide education about appropriate online behavior to their students who are actually accessing the Internet using E-rate covered services. Schools are not required to provide education about appropriate online behavior to very young students who are not yet using the Internet in school. Once schools identify the students that should receive education about appropriate online behavior, we expect schools to take reasonable steps to educate these minors. To the extent that a school has a way to record the students that have received training, it may want to retain such records. For example, if a school trains its students using an online education course, it can keep records of which students have taken the online training. Or, if a school educates its students about appropriate online behavior at a school assembly, the school could retain a record of the students in attendance that day. We recognize there may be situations, however, where it would be difficult to demonstrate that all of the students identified as needing the training have been trained, due to student absences or other variables. To the extent a school is aware that some students have missed the scheduled training, the school should take reasonable steps to provide a make-up training or otherwise provide the relevant material to those students.
Failure to Comply
- Failure to comply with CIPA results in ineligibility for the funding program.
- In general, where it is found that a funded school or library is not in compliance, the funding agency shall cease funding and give notice to the school or library indicating it should be brought into compliance. Libraries under Museum and Libraries Act 20 U.S.C. 9134(f)(5); Education Act Sec. 3601(a)(4)
- With e-rate only, where it is found that a funded school or library is not in compliance § 254(h) (not § 254(l) 47 USC 254(h)(5)(F)(ii); 254(h)(6)(F)(ii)), the school or library can be liable to reimburse the FCC for the funds for that funding year. E-rate 47 USC 254(h)(5)(F); 254(h)(6)(F)
See CIPA Reference :: CIPA Text