Texas SCOPE Act school compliance: HB 18, banned apps and your web filter

Texas districts and open-enrollment charter schools work under federal CIPA plus state rules on device standards, filters on student devices, covered apps on district hardware and personal phones. Here is how each rule lands on your filtering and parent tools.

11items TEA standards must address under Ed Code 32.1021
5conditions before a device goes home with a student
4alert topics TEA must consider for filters
3state laws beyond CIPA to track
Federal baseline

What CIPA already requires, and what Texas stacks on top

CIPA is the federal floor for any Texas school taking E-Rate discounts. Texas law does not replace it. The state adds its own conditions, mostly about devices, apps and parents. Start with our explainer on what CIPA requires of schools if you are new to the federal rule.

Federal CIPA

  • A technology protection measure that blocks or filters obscene images, child sexual abuse material and, for minors, images harmful to minors.
  • An internet safety policy adopted after public notice and a public hearing or meeting.
  • The policy provides for monitoring minors' online activities.
  • Education for minors on appropriate online behavior and cyberbullying awareness.
  • Certification on FCC Form 486, or Form 479 for consortium members.
+

Texas additions

  • HB 18 Article 3: state standards for devices and apps used by districts, set by the Texas Education Agency.
  • Ed Code 32.104: five conditions, including an obscenity filter, before transferring a device to a student.
  • Parental consent before students use software applications, with assessment exceptions.
  • SB 1893: covered apps barred from government-owned or leased devices.
  • HB 1481: written policy on personal communication devices during the school day.
Texas device duties

Put the filter condition for take-home devices in one place

Texas ties a device going home to a filter that blocks pornographic and obscene material, and it adds a covered-app rule for district hardware. Our hosted CIPA filter is a DNS filter that we run for you, with a private encrypted link that carries the same category rules to a laptop away from the school network.

  • Adult and VPN/Proxy/Anonymizers are on in the CIPA preset, and Lingerie is an optional switch for students
  • Social Networking can be set school by school, which suits a grade-band decision on social media
  • The filter decides by domain, so it is a category control and not a tool that reads what students type
Schools list in the hosted CIPA filter with lookups and blocks, for a Texas district preparing devices to go home
120M+
categorized domains for adult, proxy and social blocks
Milliseconds
for each lookup, at school or at home
1 DNS setting
per campus router or firewall, with no software on the devices
Preview the filter for a Texas districtDiscuss a pilot on one Texas campusCheck how an app's website is categorized
HB 18 Article 3

The SCOPE Act device and software standards for Texas schools

HB 18, passed by the 88th Legislature in 2023, added Education Code 32.1021. It tells TEA what its standards for school devices and apps must cover. Article 3 applies from the 2023 to 2024 school year, and TEA published its standards to districts later in 2023. Below is our plain summary of each item.

Collect less student data

Standards must keep data gathered through devices and apps to a minimum.

Parental consent for apps

Direct, informed consent before a student uses an app, except tools needed for certain state and readiness assessments.

No hidden assessments

Apps may not run mental health or other non-curricular assessments that collect student data without that consent.

Parent resources first

Parents get material on cybersecurity and online safety risks before their child uses a school device.

Device off times

Set times when a device the district loans out must be turned off for safety.

Age-appropriate screen limits

Consider limits on in-class device use so students can learn and work without screens.

Social media restrictions

Consider limiting student access to social media on district-provided devices.

Safer option test

Before using a social media app for teaching, confirm no safer tool offers the same function.

Alerting filters

Consider filters that alert administrators to content on self-harm, suicide, violence to others or illegal drugs, with parents then notified.

A named officer

Each district names an officer to receive device and online safety complaints from staff, students or parents.

Vendor verification

Ways for districts to check that contracted app operators follow the related Education Code subchapter.

Directly shapes web filter configurationMainly policy, procurement or parent communication

Several items say TEA must "consider" a measure rather than require it. The final TEA standards decide what districts must do. Read the current TEA guidance alongside the statute.

Education Code 32.104

Before a device goes home: the five transfer conditions

HB 18 expanded what a district or open-enrollment charter school must do before transferring data processing equipment or an electronic device to a student. The last condition is the one your filter team owns.

Step 1

Adopt transfer rules

Local rules for how devices are handed out, including the technical help students get.

Step 2

Confirm public purpose

Decide that the transfer serves a public purpose and benefits the district.

Step 3

Wipe sensitive content

Remove anything offensive, confidential or proprietary from the device.

Step 4

Partner with parents

Adopt rules for programs that involve parents in cybersecurity and online safety on the device.

Step 5

Install a filter

For educational devices, a filter blocking pornographic or obscene material and apps, including pop-ups, installs and downloads.

Why the filter has to travel with the device

A filter that only works on the campus network does not meet a condition attached to a device that leaves campus. Device-level or cloud-based filtering keeps the same rules at home.

See our guides on enforcing CIPA on off-campus student devices and cloud-based web filtering for schools.

Before it leaves the building

Keeping the same blocks on a student's laptop at home

The transfer rule asks for a filter on the device itself, not only on the campus network. The private encrypted link in our hosted filter applies your school's categories to a laptop or phone off the network, and nothing is installed on the computer.

See how a device keeps its rules at home
Related Texas rules

SB 1893 covered apps and the HB 1481 phone rule

Two more laws reach district technology. One controls which apps can sit on district hardware. The other controls students' own phones during the day.

Government Code Chapter 620 · 2023

SB 1893: covered applications on government devices

Governmental entities must adopt a policy barring covered applications from devices they own or lease, and must require removal where already installed. The definition of governmental entity includes political subdivisions.

Covered appsTikTok and successor apps from ByteDance or its affiliates, plus apps the governor names by proclamation. ExceptionsUse needed for law enforcement or for information security work, with risk measures documented. Model policyThe Department of Information Resources and the Department of Public Safety jointly prepare one. DistrictsTexas school districts are generally treated as political subdivisions. Many have adopted a covered app policy. Confirm with counsel.
Education Code 37.082 · 2025

HB 1481: personal communication devices

Each district and open-enrollment charter school must adopt and enforce a written policy prohibiting student use of personal communication devices on school property during the school day.

OptionsKeep devices off campus, or provide secure storage during the day. ExceptionsNeeds under an IEP, Section 504 or similar plan, a physician's documented directive, and legal health or safety requirements. School dayReported as running from first bell to last bell, including lunch and passing periods. DisciplineThe policy must set consequences and may allow confiscation, with notice rules for parents.
The covered-app family in our data

How TikTok's domains and a ByteDance sibling are labelled

A covered-app policy usually starts with names a student can type. These lookups come from our database, and several sites sit in two categories.

DomainCategories in our dataWhat it means for a Texas network
tiktok.comSocial Networking, Streaming MediaThe main site, reached by either category switch
tiktokv.comSocial NetworkingTraffic from the app, not only the website
douyin.comSocial Networking, Streaming MediaA sister service from the same company
lemon8-app.comSocial Networking, Community SitesA lesser-known social app that a Social Networking rule reaches
capcut.comWeb-based Applications, AI / LLM ToolsA video editor in different categories, so a social rule alone misses it
bytedance.comBusiness, Computers & Technology, AI / LLM ToolsThe company site, which a policy may want treated separately
Look up another app your district reviews

Court rulings on Article 2 of HB 18

Article 2 sets duties for digital service providers, not schools. Federal courts have blocked parts of it, including provisions requiring providers to filter certain content, and the litigation has continued on appeal.

These rulings concern providers, not district duties under Article 3. Ask counsel for the current status before you cite any of it.

Configuration

What the SCOPE Act means for web filtering and parental tools

Read each rule as a configuration question. The table separates what is required by statute, what TEA was told to consider, and what stays a local choice. Your CIPA compliance checklist covers the federal side.

RuleStatusFilter or tool settingCategories that usually apply
Obscenity filter on transferred devices (32.104)StatuteDevice-level policy that applies on any network; block app installs and pop-up downloads from untrusted sources.Adult; Lingerie/Swimsuits/Intimate Apparel; VPN / Proxy / Anonymizers
CIPA technology protection measureFederalCategory blocking on network and managed devices used by minors.Adult, plus local choices such as Gambling, Weapons, Illegal Drugs
Social media limits on district devices (32.1021)TEA to considerBlock or allow-list by grade band; allow approved teaching platforms.Social Networking; Community Sites; Forums / Message Boards
Alerts on self-harm, suicide, violence, drugs (32.1021)TEA to considerAlert routing to a named administrator, with a parent contact step.Violence; Illegal Drugs; Hate/Discrimination
Covered apps (Gov Code 620)StatuteApp block through device management; domain block on district networks.Named app domains; Social Networking where policy extends
Device off times (32.1021)TEA to considerScheduled policies, such as overnight access windows on loaned devices.All categories, time based
Personal phones (37.082)PolicyNetwork filter covers phones only on school Wi-Fi. Storage policy covers the rest.Guest Wi-Fi category rules

Parent tools are part of compliance, not an extra

The standards point to parent resources before device use and a parent contact step after alerts. A parent portal or a clear written guide showing what is blocked helps meet both.

Pair it with your acceptable use policy for schools so families see one consistent set of rules.

Planning

A school-year calendar for Texas filtering compliance

Most of these duties repeat every year. Tying them to the school calendar keeps them from piling up in August, when devices go out and staff time is shortest.

Spring

Review and renew

Compare filter settings with the latest TEA standards. Check that app and filter contracts still meet consent and data rules before renewal. Update the covered app list if the governor has named new apps.

Summer

Prepare devices

Wipe returned devices, apply the filter profile and test it from an outside network. Refresh parent online safety material and the consent forms for the new app list.

Back to school

Send and collect

Send parent resources before the first device leaves campus. Collect consents, publish the complaint officer's contact details and brief campus leaders on the phone policy.

During the year

Watch and record

Run spot checks each term, log alerts and how parents were contacted, and record complaints and outcomes. File E-Rate certification on time for the funding year.

Districts with large 1:1 programs often split ownership between the network team and campus technology staff. Write down who owns each step so nothing falls between them. Our guide on how to implement web filtering in schools covers rollout roles in more depth.

Checklist

Texas school district SCOPE Act compliance checklist

Each row shows a suggested owner. Boxes are only for your working session in the browser and are not stored.

Evidence

Evidence to keep for TEA, auditors and parents

Texas rules create records that are easy to forget, such as consent logs and parent resources. Store them with your CIPA file so one request does not turn into a search.

CIPA records

  • Adopted policy and meeting minutes
  • Filter category export
  • Form 486 or 479 confirmation

Device transfer file

  • Transfer rules
  • Wipe procedure
  • Filter test from off campus, dated

Consent log

  • App list with consent status
  • Assessment exceptions
  • Parent resource send dates

Covered app file

  • Adopted policy
  • Device management report
  • Exception approvals and risk notes

Alert handling

  • Alert topics enabled
  • Who receives alerts
  • Parent notification steps

Phone policy

  • Adopted policy
  • Exception process
  • Storage approach by campus

Complaint officer

  • Name and contact
  • Complaint log
  • Outcomes

Spot checks

The Texas device and filter duties, covered by hand or by our filter

Every row here is something a Texas district has to be able to show on a device, a campus or a parent's request.

Texas dutyHandled by handHosted CIPA filter
Obscenity filter before a device goes homeInstall and test software on each deviceCIPA preset with Adult on, and a private encrypted link for off-network use
Social media limits on district devicesSeparate block lists for each grade bandCategory settings for each school or branch in one console
Covered app on district networksType each domain into a list and watch for new onesDomains blocked through Social Networking and other categories as they are classified
Bypass attempts by studentsA running list of proxy sitesVPN/Proxy/Anonymizers blocked, even during a staff PIN bypass
Phones on guest Wi-FiA separate guest setupThe same DNS setting and category rules on that network
Papers for TEA, auditors and parentsScreenshots and emailsActivity reports, policy record and a log export
See what the filter covers on a Texas campusRequest a quote for your Texas district
FAQ

Texas SCOPE Act and school filtering FAQ

Short answers. Each depends on the current statute and TEA guidance, so check both before acting.

Does the SCOPE Act apply to Texas school districts?
Yes, in part. Article 3 of HB 18 amended the Education Code with duties for districts and open-enrollment charter schools. Article 2 targets digital service providers, not districts.
Does Texas require a filter on school devices given to students?
Yes. Education Code 32.104 requires a filter blocking pornographic or obscene materials or apps before transferring a device used for education, including content from pop-ups, installs and downloads.
Does HB 18 require filters that alert parents about self-harm?
The statute tells TEA to consider filters that alert administrators about self-harm, suicide, violence to others or illegal drugs, with parents then notified. Check the current TEA standards for what is required.
Do Texas school districts have to block TikTok?
Government Code Chapter 620 requires governmental entities, including political subdivisions, to bar covered apps on devices they own or lease. School districts are generally treated as political subdivisions. Confirm your position with counsel.
Is the personal phone rule part of the SCOPE Act?
No. It came from HB 1481 in 2025, which amended Education Code 37.082. It requires a written policy prohibiting student use of personal devices during the school day.
Does blocking social media meet the SCOPE Act?
Blocking can support the social media standard, but it is one piece. Consent, parent resources and the complaint officer are separate duties. See our page on social media filtering in schools.
Do we need consent for the web filter itself?
That depends on how TEA standards and your counsel treat the filter. Many districts treat it as required safety infrastructure. Ask counsel and document the decision.
Do open-enrollment charter schools have the same duties?
The Article 3 provisions name both school districts and open-enrollment charter schools, so charters should plan for the same device, filter and consent steps. Private schools fall outside these Education Code sections, though CIPA still applies if they take E-Rate.
How do we test the device filter properly?
Take a prepared device home or onto a mobile hotspot, sign in as a student and try known adult, proxy and gambling sites. Save dated screenshots. Repeat after every major policy change.
Where do AI chat tools fit?
They are software apps, so consent and data rules may apply. A dedicated category helps you allow approved tools only. See our AI tools blocklist for schools.
Other states

Compare school internet rules in other states

California school internet safety laws New York school internet safety laws Ohio SB 29 school compliance 1:1 device filtering for schools

See all state guides on our school internet safety laws by state page.

Not legal advice. This page summarizes federal and Texas rules in our own words for general information only. Statutes, TEA standards and court rulings change, and some details here may be out of date. Check the current law and guidance and confirm your obligations with your district's legal counsel.

Related guides

We quote by the number of Texas campuses and devices and reply within one business day. Many districts begin with a pilot on one campus, so staff can see the blocks and reports before they plan the next step.

Talk to us about your Texas district

Tell us how devices leave campus, which apps you must block and how alerts reach families. We will show how our CIPA category coverage and the hosted CIPA filter pilot fit your setup.

Talk to us about your district

TikTok is a trademark of ByteDance Ltd. or its affiliates. It is used here only to identify the application named in Texas law. CIPA Web Filtering is not affiliated with, sponsored or endorsed by ByteDance Ltd.