Public schools must enforce internet safety rules starting July 2027

Public school systems and public charter schools must adopt and enforce internet safety policies. The policies cover public school systems and public charter schools, including their internet access and computers with internet access. Policies must include internet safety teaching, communication with parents, safeguards for students' personal information, and rules for safe online communication. School computers must block content the school deems harmful, pornography, obscenity, content promoting self-harm, and material legally defined as harmful to minors. Violent or frightening content must be blocked when it is unsuitable for the student's age or maturity and the school finds no educational value. Policies must restrict employees' access to the listed content and set consequences for violations. Schools may add other rules, such as requiring parents' written permission for students' internet use. Schools must review their policies at least twice each year and update them when needed. The requirements take effect July 1, 2027.

Providers must check and filter covered school resources. Schools and state agencies buying those resources must provide a complaint process. These rules cover providers contracting with public school systems, public charter schools, or state agencies for digital materials made and marketed for pre-K through grade 12. Medical resources are exempt. Contracts and agreements entered into before July 1, 2027, remain in force until they expire. Providers must block pornography, obscenity, and content promoting self-harm. They must also block violent or frightening content unsuitable for students' age or maturity when the contracting school or agency finds no educational value. Providers must verify that their materials comply with the referenced state law. They must confirm in writing that their technology prevents users from sending, receiving, viewing, or downloading materials legally defined as harmful to minors. Schools and agencies must promptly review complaints and decide whether further action is needed. Providers must remove access within one business day of receiving a request based on unsuitable ages or audiences, unless both parties agree to more time. The rules take effect July 1, 2027.

Public school systems and public charter schools must prevent students in pre-K through fifth grade from sending or receiving email through school-created addresses. The restriction covers school-created email addresses for students in pre-K through fifth grade. Schools may create these addresses solely to identify students in security or grading software. The email restriction takes effect July 1, 2027.

Schools must immediately notify a parent or guardian when they learn of a student's prohibited website access. The duty applies to public school systems and public charter schools. The student must be under 18 and must have used school-provided internet access to visit a website against the school's internet rules. The notification duty takes effect July 1, 2027. Notice is required immediately when the school learns of the prohibited access.