Presenting Internet Filtering to the Library Board

Name the decision first

A board item about filtering goes best when it opens with the decision. Members listen for what they are being asked to approve, and the minutes record a clear outcome. Most filtering items ask the board for one or more of these:

• Adopt a new internet safety policy, or amend the current one.
• Approve a filtering service and its budget line.
• Set the principle for anything blocked beyond the legal minimum, for example stricter settings in the children's area.
• Authorize which staff roles may disable the filter for an adult.
• Agree how and how often the director reports on the filter.

Keep governance and operations apart. The board adopts the policy and sets its limits. The director applies it day to day: adding a wrongly blocked health site to the allow list, answering a patron, changing a router setting. Say this in the motion, so the board is never asked to vote on single websites.

What trustees ask, and answers that hold up

Trustees ask the questions their neighbors ask them. Short, factual answers prepared in advance do more than a long presentation.

What does it cost?

Give the full yearly cost: the service, any equipment, and staff time for setup, requests and reports. Say where the money comes from. E-Rate does not pay for the filter itself. USAC states that costs for the technology used to meet CIPA's protection requirements are not eligible for reimbursement, so the filter comes from the operating budget even when E-Rate pays for most of the internet bill.

Then explain what is at stake the other way. Under 47 CFR 54.520(e), a library that knowingly fails to use its computers in line with its CIPA certification must repay the E-Rate funds and discounts it received for the period of noncompliance. Put that risk next to the cost of the filter.

As one example of a filter cost, our hosted CIPA filter is $99 a month, or $990 a year, for one library. A library system gets a written quote within one business day.

Does CIPA apply to us, and what exactly does it require?

CIPA applies when the library receives E-Rate discounts for internet access or internal connections. It asks for three things: a filter on the library's computers with internet access that protects against visual depictions that are obscene or child pornography for all users, and harmful to minors for users under 17; an internet safety policy that covers five topics; and public notice with at least one public hearing or meeting on the proposed policy. The extra duties to monitor minors and educate them about online behavior are written into the rules for schools, not for libraries.

The law also leaves an important decision with you. Under 47 U.S.C. 254(l)(2), what matter is inappropriate for minors is determined by the school board, local educational agency, library or other authority responsible. No federal agency may set the criteria for that decision or review it.

Does filtering fit our commitment to open access?

Start from the board's own statements: the mission, the collection policy and any intellectual freedom statement the board has adopted. Then show how narrow the legal requirement is. CIPA names visual depictions in three classes. It does not require blocking topics, ideas, social media or news. It lets an authorized person disable the filter for an adult for bona fide research or other lawful purpose.

A board that wants to protect access can adopt a short list: the legal minimum on adult computers, stricter settings only where the board decides, such as the children's area, and a fast, private way for adults to have the filter lifted. On our hosted filter, the CIPA preset blocks adult content and VPN or proxy sites, which people use to hide traffic from the filter. Every other category is optional. Our guide to intellectual freedom and library filtering sets out both commitments in more depth.

What happens to patron privacy?

A DNS filter sees which websites devices look up. It does not know who is using a device. Tell the board what is recorded, who can see it and how long it is kept. With the hosted filter, only the accounts the library sets up can see the activity log, and the staff bypass log records when the PIN was used and for how long, not what the adult then read.

Ask counsel how your state's law on the confidentiality of library records applies to filter logs, and put a retention period in the policy.

What happens when someone complains?

Complaints come from both directions: a site is blocked that should not be, or something is open that a parent thinks should be closed. Show the board the written route for both, the response time, and how patterns are reported. The board should hear about complaints in summary, and decide only appeals and policy questions.

Can children get around it?

Some will try. Explain what is in place: VPN and proxy sites are blocked, and on the hosted filter so are public encrypted DNS services and browser settings that skip the network filter. No filter catches everything, so supervision, the layout of the room and the children's area settings still matter.

A one-page brief for the board packet

Trustees read a single page more carefully than a long attachment. Use the same headings every time the item comes back, so members know where to look. Fill in the brackets and cut anything that does not apply.

Write the brief in plain words. Explain CIPA and E-Rate once and avoid other acronyms. If you expect questions on a particular point, walk the chair through it a week ahead.

What the law asks before the vote

The public step is the part auditors check, and the part that is easiest to miss when a board is busy. Here is the wording in the statute and the FCC rule.

The five topics in 254(l)(1)(A) are: access by minors to inappropriate matter on the internet; the safety and security of minors when using email, chat rooms and other direct electronic communications; unauthorized access, including so-called hacking, and other unlawful activities by minors online; unauthorized disclosure, use and dissemination of personal identification information regarding minors; and measures designed to restrict minors' access to materials harmful to minors. Our guide to the CIPA internet safety policy covers each topic.

What the rules leave to you

• They do not define reasonable public notice. USAC's examples include an announcement on the library website of a regular board meeting open to the public where the policy will be discussed, or a newspaper notice of a local government meeting with the policy on the agenda.
• They do not require a separate hearing. A regular board meeting open to the public can serve, if the policy is on the agenda and the public can comment.
• They do not require a new hearing for every amendment. USAC says additional meetings are not necessary, even if the policy is amended, unless state or local rules or the policy itself require them.
• They do not replace your state's open meetings law. That law still sets how the board gives notice of its meetings and how it acts.

Records USAC expects

USAC says that since 2011 schools and libraries have had to keep at least some record of when the public notice was given and when the hearing or meeting took place, such as a copy of the agenda or a newspaper notice. Keep the minutes that show the adoption as well. Under 254(l)(3), the policy must also be made available to the FCC on request. Post it on the website and near the public computers too, which helps patrons as much as auditors.

The motion and the adoption steps

Each step leaves a record. File it the day it happens, not when an auditor asks.

1. Draft and check. The director drafts the policy or the changes, starting from the library's current policy or our model policy. Counsel reviews it against state law. The director confirms that the filter really does what the policy says.Keep: the drafts and counsel's note.
2. Put it on the agenda. Schedule the item at a regular or special meeting with a clear title, for example "Public hearing and action: Internet Safety Policy." Follow your state's open meetings law for the notice period.Keep: the dated agenda.
3. Give public notice. Announce the meeting and the item where the public normally learns about board business: the website, a posting at the library, a newspaper or a local government notice board. Make the draft available to read.Keep: a copy of each notice with its date.
4. Hold the hearing or meeting. The director summarizes the policy in a few minutes, the chair invites public comment, and trustees ask questions.Keep: minutes that show the public could comment, with the themes raised.
5. Move and vote. The motion adopts the policy, sets the effective date, authorizes the roles that may lift the filter for adults, delegates day-to-day settings to the director and sets the reporting schedule.Keep: the minutes or the signed resolution.
6. Publish and train. Post the adopted policy and train every desk on the unblock process before the effective date.Keep: the training date and who attended.
7. Certify. Through funding year 2027 the library certifies on FCC Form 486, or on Form 479 to its consortium lead. From funding year 2028 the FCC has moved the CIPA certification to FCC Form 471.Keep: copies of the forms.

CIPA does not say the vote must come at a later meeting than the hearing. Put public comment before the vote on the same agenda, unless your bylaws or state law say otherwise. Adapt the wording with counsel.

Running the hearing or meeting

A filtering item can draw a crowd or no one at all. Prepare for both.

• Open with the facts. In about five minutes: why the item is here, what the law requires, what the policy changes, what stays open, how adults get the filter lifted and what is recorded.
• Let people speak. Use the board's normal public comment rules and time limits. The point is to listen, not to win.
• Answer facts, note opinions. Correct factual errors calmly. Record opinions in the minutes as themes.
• Decide what changes. If a comment leads to a change in the draft, check whether your rules require new notice before the vote.

After the vote: certification and records

Adoption starts a paper trail that USAC may ask for years later. USAC lists the documents it requests in a CIPA audit:

• a copy of the internet safety policy;
• documentation of the public notice and the hearing or meeting;
• documentation of the adoption, such as approval in the minutes;
• a description of the filter;
• a report or other documentation showing the filter was installed and working during the funding year;
• copies of FCC Form 479 or Form 486, as applicable.

Keep them for at least 10 years after the later of the last day of the funding year or the service delivery deadline. Publish the adopted policy on the website, near the public computers and on the Wi-Fi page. If your library belongs to a consortium, send the signed Form 479 to the lead in time for its filing. Our guide to what USAC asks for in a CIPA audit shows how reviewers use these records.

Reporting back to the board

The board adopted a policy. Now it needs to see, in a few minutes, that the policy works and what the library's connection does for the community. A steady routine stops filtering from returning to the agenda only when something goes wrong.

Keep every figure at the level of totals. No names, no lists of what a person read and no screenshots of raw logs. Session counts for the state's annual survey come from your booking system and wireless equipment, not from the filter. Our guide to reporting library internet use explains the difference and how to combine the two.

Time the annual review to the E-Rate calendar. From funding year 2028 the CIPA certification is made on Form 471, in the application window that generally runs from mid-January to mid-March, so the policy review fits best in the autumn before.

Weathervane: a board report built from the filter

If you would rather not assemble the figures yourself, Weathervane is our add-on to the hosted CIPA filter. It turns the filter's records into a board-ready PDF of about twelve pages with your logo: what the internet was used for, grouped into sixteen purposes such as jobs, government services, health and library e-resources; when people were online; each branch or network side by side; what was blocked, with adult website names masked; and a CIPA record for the period with the filtering policy on record and the unblock log.

It arrives by email on the first day of each month. Board members can open it through a private link without signing in, and you choose how long the link works. The dashboard has the same figures for any period you pick. You can open the sample report, built from made-up demo traffic.

• One library: $79 a month, or $790 a year.
• A library system: $149 a month, or $1,490 a year, for the whole system.
• New subscribers: the CIPA filter and Weathervane together for one library at $178 a month, or $1,780 a year.
• Customization included: a different period, your own wording or an extra figure is part of the price.

Weathervane needs the hosted filter, because it reads the records the filter keeps anyway. It supports your documentation. It is not legal advice and does not guarantee E-Rate eligibility. The full details are on the Weathervane page.

When a complaint reaches the board

Most complaints should be settled before they reach the board. Give them a written route with clear steps.

1. Staff record the site and the concern, without the patron's browsing history.
2. The director reviews the site against the policy, decides, and replies in writing within the set time.
3. If the person is not satisfied, they can ask the board to review the decision. If the library has a reconsideration policy for materials, model the route on it.
4. The board hears the appeal in public session, looks at the site and the policy rather than the person, and decides.

If a complaint shows that the policy itself should change, treat it as a new agenda item with its own notice. Avoid changing settings in response to one complaint without a record. A narrow, documented process is easier to defend than a series of one-off decisions. Desk scripts for the first step are in the library staff guide to filter requests.

Sources

The statute and rule wording on this page is quoted from these official sources, checked in November 2026. Confirm current rules with USAC and your counsel before the meeting.

• United States Code: 47 U.S.C. 254, subsections (h)(6) and (l), quoted from the 2023 edition on govinfo.gov.
• Electronic Code of Federal Regulations: 47 CFR 54.520, paragraphs (a)(2), (c), (e), (g) and (h).
• USAC: Children's Internet Protection Act (CIPA), for the examples of public notice, additional meetings after an amendment, the records requested in an audit and the 10-year retention rule.
• USAC: T-LEAP FAQs, question 7, on CIPA technology costs not being eligible for E-Rate.
• FCC: Report and Order, FCC 26-30, adopted April 30, 2026, paragraphs 3 and 57 to 60, on the application window and on moving the CIPA certification to Form 471 from funding year 2028.