A public library internet filtering policy has to do two jobs at once. It must meet the CIPA conditions tied to federal funding, and it must protect adult patrons' access to lawful information.
This guide explains what the law asks of libraries, gives you a model policy in copyable sections, and walks through board adoption, signage and unblock requests.
The Children's Internet Protection Act attaches conditions to specific federal funding. For libraries, the duties fall into three groups.
A filter on the library's internet-connected computers that blocks visual depictions that are obscene or child pornography for all users, and also material harmful to minors when minors use them.
A written policy that addresses minors' safety online and includes the filter. It must cover a defined list of topics, listed in the template below.
For E-Rate, the policy is adopted after reasonable public notice and at least one public hearing or meeting where the community can comment.
| Question | Short answer for libraries |
|---|---|
| Which libraries are covered? | Libraries receiving E-Rate discounts for internet access or internal connections, and libraries using certain Library Services and Technology Act (LSTA) funds for internet access or for computers that access the internet. |
| How is compliance certified? | For E-Rate, on FCC Form 486, or through Form 479 when a library is a member of a consortium. LSTA certification runs through your state library agency, so check its current guidance. |
| Which computers are filtered? | The library's internet-connected computers, including those used by staff. Many libraries also filter public wifi that runs over the same funded connection. |
| Can adults get unfiltered access? | Yes. An authorized person may disable the filter for an adult for bona fide research or other lawful purposes. |
| Does the school monitoring duty apply? | The monitoring and online safety education duties added for schools are school duties. Libraries focus on the filter, the policy and the hearing. |
| What about state law? | Several states have their own library filtering or policy laws. Check your state's rules alongside the federal ones. |
This guide is written for library directors, IT staff and trustees, not as legal advice. Confirm details with your E-Rate consultant, your state library agency or counsel. For the wider background, read our plain-English guide to what CIPA is and how E-Rate and CIPA funding connect.
The template speaks of CIPA, adult requests and records. The hosted filter has a setting for each.
This is the provision that makes library filtering different from school filtering. Your policy should make it easy to use and easy to explain.
Each card is one section of a working policy. Copy the sections you need, replace the highlighted fields, and have your counsel review the result.
The [Library name] provides internet access to support the information, learning and leisure needs of its community.
This policy explains how the library filters that access, how patrons can ask for changes, and how the library protects minors online in line with the Children's Internet Protection Act and [state] law.
This policy applies to all library-owned computers and devices with internet access, at every branch, and to the library's wireless network.
It applies to patrons of all ages, to staff and to volunteers using library equipment or the library network.
All library internet access is filtered. The filter is set to block visual depictions that are obscene or child pornography for every user, and visual depictions harmful to minors for minors.
The library may also block categories that threaten network security or the privacy of patrons. The director keeps a current list of blocked categories, available on request.
An adult patron may ask authorized staff to disable the filter, or to unblock a specific site, for bona fide research or other lawful purposes. Staff will respond promptly and courteously, and will not ask the patron to explain the subject of their research.
Unfiltered access ends when the session ends or after [time period], whichever comes first. Content that is illegal to view remains prohibited at all times.
Requests may be made at any service desk, by phone at [number] or by email at [address].
The library takes steps to limit minors' access to inappropriate material online, including through the filter described in this policy.
No filter is perfect. Parents and guardians remain responsible for deciding what their own children may access, and are encouraged to talk with them about safe use.
Minors using email, chat, messaging or social sites on library equipment should never share passwords, meet people they have met online without a parent's knowledge, or respond to messages that make them uncomfortable.
Staff can help minors report concerns and find safety resources.
No user may attempt to gain unauthorized access to any computer, network or account, including so-called hacking, or attempt to disable or get around the library's filter or security settings.
Using library equipment for any unlawful activity is prohibited.
No user may disclose, use or share personal identifying information about a minor without authorization.
Minors are advised not to post their full name, address, school, phone number or photos on public sites while using library equipment.
Requests to disable the filter or unblock a site are confidential library records, handled under [state library records law].
The library keeps filter activity records only as long as needed to run the service and show that this policy is followed, and no longer than [retention period].
Any patron may ask the library to review a site they believe is wrongly blocked or wrongly allowed. Requests go to [role], who reviews the site and replies within [number] working days.
The library's decision on its own settings is final, and the patron may raise it with the director.
Breaking this policy may lead to loss of computer privileges, in line with the library's code of conduct.
The board adopted this policy on [date] after public notice and a public meeting on [date]. The board reviews it every [period].
Sections 6 to 9 map to the topics an internet safety policy must address under CIPA. For a deeper look at those topics, see our guide to the CIPA internet safety policy. School districts can compare it with an acceptable use policy for schools.
Adoption is the part auditors ask about. Each step below leaves a record you should keep in one compliance folder.
The director, IT lead and a front-line staff member review the template together. Front desk staff know which unblock requests are common.
Keep: draft versionsConfirm the filter really blocks what the policy says, and that authorized staff can disable it for adults in under a minute.
Keep: settings screenshot or exportAsk counsel to check the draft against state library records and filtering laws, and against your existing code of conduct.
Keep: review notePost the meeting notice and the draft policy the way you normally notify the public of board business, such as the website, branches and local notices.
Keep: dated noticePut the policy on the agenda and allow public comment. Note who spoke and what changed as a result.
Keep: agenda and minutesRecord the vote and the effective date. Publish the final version on your website and at each branch.
Keep: signed resolutionTrain every desk on the unblock process before the effective date. Then complete your E-Rate or LSTA certification on time.
Keep: training log, form copiesOur CIPA compliance checklist lists the full set of records to keep, and works for libraries as well as schools.
Policies often name types of sites. These show how real examples are filed.
| Site | Categories |
|---|---|
| playboy.com | Lingerie/Swimsuits/Intimate Apparel |
| bet365.com | Gambling, Sports & Recreation |
| gunbroker.com | Weapons |
| torproject.org | VPN / Proxy / Anonymizers |
| archive.org | Education/Reference |
| overdrive.com | Education/Reference, Arts & Entertainment |
Signs tell patrons the filter exists and that adults can ask for it to be turned off. Keep them short and friendly. Here is wording you can adapt.
Internet access here is filtered. Adults may ask staff to turn the filter off or open a blocked site. Just ask at the desk.
Place near the screen, at eye levelThis network is filtered under library policy. If a site you need is blocked, contact staff or use the request link below.
Link to the request form or emailWe filter the internet to help keep young users safe. Grown-ups: please talk with your children about what they do online.
Pair with a parent resource sheetUse the same wording on signs, the website and the block page. Patrons trust a rule they see explained the same way everywhere.
Warnings that suggest patrons are watched or that asking is suspicious. That discourages adults from using a right the law protects.
There are two kinds of request. An adult wants unfiltered access now, or anyone reports a site that seems wrongly blocked. Handle them on separate tracks.
At the desk, by phone or through a short web form. No reason needed from adults for session access.
Authorized staff disable the filter for that computer or session, or unblock the site, then confirm it works.
Access returns to normal at the end of the session or time window, so nobody has to remember to switch it back.
If the site was blocked by mistake, the IT lead adds it to the library's allow list for everyone.
| Request type | Who decides | Typical timing | What to log |
|---|---|---|---|
| Adult session access | Any authorized desk staff | On the spot | Date, time, computer or branch, staff initials. No topic. |
| Adult single-site unblock | Any authorized desk staff | On the spot | Same as above |
| Site wrongly blocked for all | IT lead or director | Within your stated review time | Site, decision, date |
| Site wrongly allowed | IT lead or director | Within your stated review time | Site, decision, date |
| Minor asks for a blocked site | Per your policy and state law | Review, not on the spot | Site, decision, date |
Before deciding on a reported site, look up how it is categorized with our school web filter check. It shows which categories a domain carries, which helps explain why a filter acted the way it did.
The policy record helps the board verify the filter matches the policy text.
A policy is only as good as the filter behind it. Before adoption, confirm your service can do the following.
Read more about web filtering solutions for libraries, how the web filtering categories are organized, or see our hosted web filter for libraries with a staff PIN for adult access.
How the filter responds
| Policy line | Without a tool | Hosted filter |
|---|---|---|
| Block harmful images | Manual lists | Adult category in CIPA preset |
| Prevent circumvention | Hard | VPN/Proxy blocked even with PIN |
| Disable for adults | Switch off | Timed, logged PIN |
| Different branches | Separate files | Separate settings per branch |
| Annual review | Gather by hand | Reports and policy record |
Short answers to the questions trustees and staff ask most often.
No. The federal CIPA requirements apply to libraries that receive E-Rate discounts for internet access or internal connections, or certain LSTA funds used for internet access or computers that access the internet. Some states have their own library filtering laws, so check your state as well.
CIPA allows an authorized person to disable the filter for an adult for bona fide research or other lawful purposes. Many libraries do not ask adults for a detailed reason, and treat the request as a routine, confidential service. Confirm your approach with counsel.
For E-Rate purposes the filter is generally expected on all of the library's internet-connected computers, including staff computers, with the option to disable it for adults for lawful purposes. Check the current guidance with your E-Rate adviser.
Yes. For E-Rate, the internet safety policy must be adopted after reasonable public notice and at least one public hearing or meeting. Keep the notice, the agenda and the minutes on file.
If the wireless network is part of the internet access that receives CIPA-linked funding, most libraries filter it the same way as the public computers. Treat it as in scope unless your adviser confirms otherwise.
No. You also need a written internet safety policy that covers the required topics, adopted with public notice and a hearing, plus records showing the filter is in place and the policy is enforced.
Use it as a starting draft. Adjust names, roles, ages and procedures to your library, align it with state law and your existing policies, and have your board's counsel review it before adoption.
Send us your number of branches and devices and we will reply with a quote inside one business day. One pilot site is enough to show the blocks and reports before a decision.
Tell us how many branches and public computers you have. We will explain how category filtering and a staff unblock for adults could work in your library.
Talk to us about your library See the hosted filter