E-Rate applicants must retain documentation that shows the applicant’s CIPA Internet Safety Policy was in place by July 1, 2012. In the case of a new school, district, or library, compliance with the CIPA Internet Safety Policy would need to be in place at the end of the first year of E-Rate participation for your entity.

1. Document proof of public (board) meeting where CIPA policy is included as an agenda item and its announcement to the public (web page, or newspaper notice)
2. Post, publish, or otherwise document that the policy is/was approved by the board.
3. Policy should include the following terms and/or phrases:
   • Technology Protection Measure
     A technology protection measure (e.g. Internet filtering software) is a specific technology that blocks or filters Internet access. It must protect against access by adults and minors to visual depictions that are obscene, child pornography, or — with respect to use of computers with Internet access by minors — harmful to minors. It may be disabled for adults engaged in bona fide research or other lawful purposes. The policy must also include monitoring the online activities of minors.
      
     Retain documentation of the technology protection measure (e.g. bills from a service provider or filter logs) for at least 10 years after the last date of service.
   • Internet Safety Policy
     The Internet safety policy must address the following issues:
     •  Access by minors to inappropriate matter on the Internet and World Wide Web
     • The safety and security of minors when using electronic mail, chat rooms, and other forms of direct electronic communications
     •  Unauthorized access including "hacking" and other unlawful activities by minors online
     •  Unauthorized disclosure, use, and dissemination of personal information regarding minors
     •  Measures designed to restrict minors' access to materials harmful to minors
     • NEW! A statement that you are "educating minors about appropriate online behavior, including interacting with other individuals on social networking websites and in chat rooms and cyberbullying awareness and response."

Retain a copy of the Internet safety policy for at least 10 years after the last day of the funding year in which the policy was relied upon to obtain E-Rate funding.

Please keep in mind that CIPA policies should not include detailed procedures describing how you comply with policy. Whatever is written in policy becomes an auditable item for which you will be held accountable. If the above items are included in documented policy, you have complied with the CIPA Policy rules.