Reference Chapter 148 · Keep students safer online while preserving legitimate research, privacy and access to learning.
A primary school installs an internet filter and proudly reports that thousands of sites are blocked. Yet pupils can still encounter harmful content through unreviewed learning apps, teachers cannot open a legitimate science resource and an authorised assistive communication service is accidentally disabled. Another school monitors every page visited by students but cannot explain who reviews alerts or what happens when the system identifies a possible safeguarding concern. A large technical dashboard can create the appearance of protection without establishing that adults are taking appropriate responsibility.
The gold standard is a national school internet filtering and monitoring service that balances child safeguarding with access to valid education, assigns clear human responsibilities, respects privacy, verifies real-world performance and provides prompt, competent escalation when a concerning event occurs. It recognises that filtering controls access to content while monitoring may flag behaviour or risk. Neither is a substitute for trusted adults, student digital literacy or lawful child-protection processes.
This chapter focuses on school-controlled internet access, managed devices, online content restrictions, monitoring alerts, privacy, vendor service and education continuity. It complements Chapter 50 on Cybersecurity and Digital Resilience, which protects systems; Chapter 126 on Student Smartphones, which governs personal devices and attention; and Chapter 08 on Student Safeguarding, which establishes the professional response to harm. This reference deals with the practical boundary between an educational internet service, its filters and the adults who remain responsible for students.
1. Begin with the actual legal and educational duties
The England Department for Education’s Filtering and Monitoring Core Standard, updated 16 September 2026, says schools and colleges must provide a safer online environment with appropriate filtering and monitoring in the context of their statutory safeguarding duties. It links the arrangements to the applicable Keeping Children Safe in Education requirements.
A National School Online Protection Charter should identify the school’s legal responsibilities, age groups, institutions and devices covered, authorised content policy, staff obligations, technology owners, relevant privacy law and child protection escalation.
The English framework is an example, not the law of every country. A ministry should verify local legal authority and distinguish compulsory requirements from useful recommendations.
The system should be able to answer a parent’s basic question: what protection operates during my child’s school internet use, and who is responsible if something goes wrong?
2. Separate filtering, monitoring and actual teaching
Filtering attempts to prevent access to specified categories of online material. Monitoring may identify patterns, search terms or other events requiring review. Digital literacy teaches students to use technology thoughtfully and recognise unsafe or misleading content.
A School Online Safety Function Map should make these purposes distinct. An automatic block does not teach source evaluation. A monitoring alert does not establish that a student deliberately sought harm. A classroom lesson cannot be assumed to prevent every unexpected exposure.
Different measures work together when each has a defined owner and the institution does not overclaim what technology can achieve.
3. Build an accountable school-level governance model
A supplier may operate filtering technology, but the school must know which staff decide educational access and review safeguarding information.
A School Filtering and Monitoring Responsibility Matrix should identify: – The principal or governing body’s lawful responsibility. – Designated safeguarding personnel and competent deputies. – IT staff responsible for technical configuration and support. – Teachers who report curriculum access problems. – Data protection or privacy officers where applicable. – External providers and their contractual boundaries. – Parents and pupils who need understandable information. – Escalation to qualified protection or law-enforcement authorities when required. – An independent review route for significant policy or access errors.
Staff who cannot obtain prompt assistance when a legitimate site is blocked should not be expected to circumvent controls informally.
4. Define which networks and devices the policy covers
A school may operate wireless internet, wired computer labs, managed tablets and remote school accounts. Pupils may also use personal mobile connections outside the institution’s technical control.
A Network and Device Coverage Register should identify the institutional networks, managed accounts, relevant off-site services, authorised school devices and limitations of coverage.
Do not promise families that the school’s filter protects every personal device at every location. Technical boundaries matter.
If a school programme relies on home access to an online learning platform, its responsibilities may differ from those applying to school-managed devices on campus. Explain legitimate safeguards and limitations accurately.
5. Apply age-appropriate rather than uniform content rules
What is suitable for a lower-primary pupil can differ from material required for senior science, history or health education.
A Curriculum and Developmental Access Matrix should identify learner stage, legitimate educational purpose, content category, necessary staff supervision and authorised exceptions.
A secondary biology class may need medically accurate information about human development that a blunt filter treats as unsuitable. A history lesson may involve disturbing primary sources that are relevant to the syllabus and require professional framing.
A national policy should neither provide unrestricted access to every site nor make academically valid research impossible through overblocking.
6. Include a clear process for legitimate unblocking
A teacher may discover that a government statistics portal, research article or required assistive service is wrongly restricted.
A Curriculum Website Access Exception Receipt should capture the resource, precise learning purpose, requesting teacher, applicable rule, competent reviewer, outcome, authorised duration and any review conditions.
This is not a suggestion to bypass filters. Legitimate access should be approved through the school’s accountable service process.
The teacher must be able to prepare a lesson confidently, rather than wait several weeks while students miss essential work.
7. Treat blocked content counts as weak evidence
A filter may block millions of harmless advertising requests while missing a harmful message delivered through a permitted app.
A School Filtering Effectiveness Review should examine the real categories covered, inappropriate exposure reports, false blocks, legitimate access requests, configuration errors and timely correction.
A graph showing a high number of blocks cannot establish that children are safe or that the system is optimally configured. The denominator and type of blocked events matter.
The DfE core standard emphasises managing both filtering and monitoring effectively, including understanding who carries responsibility.
8. Assign a real human response to monitoring alerts
An alert that remains in an unattended inbox is not a safeguarding intervention.
A Monitoring Alert Response Register should define how alerts reach authorised staff, which roles review them, the urgency categories set by competent authorities, logging and appropriate protective action.
Technical staff may maintain the platform while designated safeguarding officers assess possible welfare concerns. A supplier must not be assumed to make legal or psychological decisions on behalf of the school.
Do not treat every flagged keyword as evidence of harmful intent. Context and competent judgement are essential.
9. Avoid using automated flags as accusations
Search terms can be ambiguous or form part of legitimate academic research. A student investigating a social issue in an approved project may encounter words also associated with a safety category.
A Monitoring Context and False-Positive Review should consider educational context, technical limitations, student age, whether a genuine concern exists and the professional response.
A pupil should not automatically receive a misconduct penalty because software flagged a word. A serious welfare concern can still require prompt competent attention.
The outcome of professional review should be recorded appropriately without circulating speculative labels across the entire staff.
10. Protect students’ lawful privacy
Monitoring may reveal sensitive search history, student identities, relationships, health questions or private communications.
A Student Online Monitoring Data Governance Notice should identify what is collected, lawful purpose, who can see it, retention, relevant disclosure obligations, vendor access and correction procedures.
A safeguarding measure must not become unrestricted surveillance of students’ home lives without clear legal authority. The school should distinguish activity in its managed educational systems from private accounts it has no general right to inspect.
Parents and pupils need an age-appropriate explanation of what the school can monitor, without exposing sensitive security details.
11. Establish clear limits on vendor data use
Filtering and monitoring providers may process web requests or content signals. Their access requires legal, technical and contractual scrutiny.
A Provider Student Data Assurance Record should identify controller or responsible public institution, data types, permitted functions, storage arrangements, subcontractors, contractual restrictions and exit.
A provider should not repurpose a student’s flagged learning or welfare concerns for advertising, commercial profiling or unrelated model development without a valid lawful basis.
The education authority should be able to retrieve relevant records and terminate access when the contract ends.
12. Protect children from inappropriate commercial content
A digital learning service can display promotions, sponsored answers, gambling-related advertising, or other commercial material outside the curriculum.
A School Online Advertising and Harm Review should inspect students’ actual experience using approved software, including embedded modules and third-party content.
Filtering is not only about site addresses: an allowed platform may contain inappropriate material inside its own interface.
The commercial education framework is in School Advertising, Commercial Marketing and Student Data Protection.
13. Test accessibility and assistive technology
A filter can inadvertently block screen reader services, speech tools, translation functions or authorised communication supports.
An Online Safety Accessibility Check should follow learners’ actual permitted technology, accounts and subject tasks.
The school’s default restrictions should not silently make a necessary disability-related accommodation unusable. Appropriate legal and specialist processes determine the required adjustment.
The Assistive Technology and Universal Design chapter explains the wider access framework.
14. Design controls for research-intensive subjects
Subjects such as history, civics, literature and science sometimes require discussion of contested or sensitive material.
A Subject Research Access Review should distinguish legitimate curriculum inquiry, teacher guidance, age suitability, lawful restrictions and the options for providing reviewed source material.
Blocking all content concerning conflict, disease or sexuality can prevent educational inquiry, while unrestricted access may expose pupils to materials inappropriate for the stage.
A teacher should be able to explain why a resource is necessary and how students will use it responsibly.
15. Align filtering with independent student digital literacy
Students need to learn how to recognise manipulation, protect personal information, evaluate sources and report concerning interactions.
The UNESCO Global Education Monitoring Report 2023: Technology in Education stresses that technology should serve educational goals, supported by teacher preparation and governance.
A Digital Safety Learning Sequence should include real source evaluation, consent in digital communication, responsible research, protection of personal data and help-seeking.
Filtering can reduce some exposure, but it cannot replace teaching students to reason about what they encounter online.
16. Prepare a lawful response to online bullying
A report of harmful messages or images may involve students, private platforms, school accounts and safeguarding.
A Digital Peer Harm Handoff should identify the affected pupil, relevant known facts, appropriate evidence preservation, competent welfare or protection officer and applicable law.
An IT administrator should not independently conduct interviews into serious allegations or read unrelated private messages merely because technical access is available.
Separate suspected harm from established facts and treat all involved children fairly.
See Bullying Prevention and Peer Safety.
17. Handle generative AI services explicitly
Students may use AI search, chat or content tools within school platforms. These tools can generate inaccurate content, collect sensitive data or provide age-inappropriate responses.
The DfE filtering and monitoring standard was updated in June and August 2026 to address generative AI risk and product safety. A School AI Tool Risk Entry should document approved use cases, age, content risk, provider controls, privacy, teacher supervision and technical response.
Do not assume AI content is automatically safe because the service is branded educational.
Use teacher subject judgement and appropriate human review for consequential student decisions.
18. Establish staff training suited to real responsibilities
Teachers need to recognise when a resource is blocked and how to request access. Safeguarding officers need to assess concerning alerts. IT staff need to operate the approved system.
A Role-Specific Online Protection Training Plan should distinguish technical configuration, safeguarding judgement, classroom use, family communication and escalation.
A single generic webinar does not prove that each staff group can perform its legitimate task.
Practical exercises should test ordinary cases, like a blocked scientific resource, and concerning cases that require expert referral.
19. Review rules when students move between education stages
A learner’s permitted research and independence may change as the student progresses. The policy should not remain frozen at the settings suitable for the youngest cohort.
A Student Stage Transition Access Review should identify the relevant year or programme, approved resource categories and any changed support or responsibility.
Older learners may need broader access for legitimate subject study, while still receiving safeguarding and digital-literacy guidance.
Changes should follow authority and be communicated, rather than being implemented informally by teachers sharing technical workarounds.
20. Keep parents informed without promising universal control
Parents may want assurance that school internet access is managed. They also need to understand that the school does not control every personal connection or off-campus app.
A Family Online Protection Information Sheet should explain the school’s actual technical scope, educational uses, authorised monitoring, reporting contact and legitimate privacy limitations.
Avoid dramatic marketing claims such as every harmful site is blocked, or no pupil will ever encounter unsuitable content.
An accurate statement of limitations helps caregivers and educators cooperate sensibly.
21. Preserve continuity during technical outages
A filtering provider may fail, block all internet or cease serving an institution. The school needs a lawful, safe educational alternative.
A School Filtering Failure and Learning Continuity Record should identify failure type, competent technical response, affected lessons, appropriate temporary restrictions and legitimate alternative resources.
A teacher must not be pressured to disable a safety control informally just to finish a worksheet.
Where access cannot be restored promptly, teach the required concept through another valid method and track any outstanding learning.
The wider digital continuity process is in School IT Service Management.
22. Measure the full operation rather than only blocked addresses
A National Filtering and Monitoring Assurance Dashboard should include:
- Responsible leaders, safeguarding personnel and technical staff.
- Actual coverage of networks, accounts and devices.
- Appropriateness of filtering by stage.
- False blocks and authorised unblocking time.
- Monitoring alerts reviewed by competent humans.
- Legitimate child protection referrals and outcomes.
- Personal data collection, retention and access controls.
- Provider performance and contractual compliance.
- Accessibility and curriculum continuity.
- Staff training and family understanding.
- Material incidents, corrective actions and independent review.
- Relevant student digital-literacy outcomes.
A lower alert count may reflect better protection or ineffective monitoring. Investigate before declaring success.
23. Worked case: the science lesson blocked by a safety filter
Imagine a Secondary 2 science teacher assigning students to compare public-health sources. The school filter blocks an authoritative government resource because the site contains terminology associated with sensitive health topics.
Students are redirected toward general search results. One pupil uses an inaccurate commercial explanation to complete the task, creating a misconception.
A gold-standard response provides an authorised resource-access request. Qualified staff check the site and the educational purpose, approve suitable access or supply an appropriate reviewed alternative, and record the configuration improvement.
The teacher then teaches pupils how to judge the reliability of science claims. Safety and learning both improve because the filter can be corrected without abandoning oversight.
24. Common failures and repairs
Block counts are presented as child protection
Failure: staff do not know whether important risks are being handled. Repair: test actual student experience and human response.
Educational sites are blocked indefinitely
Failure: legitimate subject learning is obstructed. Repair: create an authorised, timely unblocking route.
Monitoring alerts are left unattended
Failure: a technical warning never reaches competent safeguarding staff. Repair: assign reviewers, priority and escalation.
A flagged word is treated as proof of wrongdoing
Failure: legitimate research is punished. Repair: investigate context and apply fair human judgement.
Personal data are collected without clear limits
Failure: safeguarding technology becomes broad surveillance. Repair: minimise data, define purpose and control supplier use.
School filters are mistaken for digital education
Failure: pupils remain unable to evaluate online information independently. Repair: teach digital and media literacy.
25. The first 180 days
Days 1–30: inventory the actual law, networks, filtering providers, monitoring operations, named safeguarding officers and urgent access or safety failures.
Days 31–60: examine representative student journeys, curriculum access, assistive technology, alert handling and supplier privacy.
Days 61–90: publish a National School Filtering and Monitoring Charter, role map, approved exceptions and data controls.
Days 91–120: pilot role-specific training, education-access reviews, suitable alerts and online safety teaching in different school settings.
Days 121–180: verify actual safeguarding response, lawful privacy, accessible learning and service resilience; correct false blocks and monitoring gaps.
26. Gold-standard acceptance tests
- Does every school know its actual online-safety duties and technical scope?
- Are filtering and monitoring responsibilities clearly separated?
- Are restrictions age-appropriate and consistent with required curriculum?
- Can teachers obtain a lawful correction for a wrongly blocked learning resource?
- Do monitoring alerts reach qualified human reviewers promptly?
- Are sensitive events handled through proper safeguarding rather than automatic punishment?
- Are student privacy and provider data use limited by legitimate purpose?
- Can pupils needing assistive technology use necessary services?
- Do outages and policy updates preserve safe educational alternatives?
- Can the ministry demonstrate real student protection and continued learning, not merely high filtering counts?
27. Parent and teacher FAQ
Can school filters prevent every inappropriate site or message?
No. Appropriate technical controls can reduce risks but do not guarantee complete protection across every service and device. Staff response and digital literacy remain important.
What happens when a necessary subject website is blocked?
Teachers should use the school’s approved review route rather than bypass safety controls. A qualified reviewer can assess the material and arrange a suitable resolution.
Does monitoring mean teachers can read all private student messages?
Not automatically. Actual powers, data collection, access and disclosure must follow applicable law and the institution’s defined service purposes.
Does an AI app advertised as educational automatically satisfy safety requirements?
No. Review the content, age suitability, data practices, human supervision and appropriate technical controls.
28. Reference sources and connected chapters
Principal sources are England DfE Filtering and Monitoring: Core Standard (updated September 2026), its 2026 update history, and UNESCO Global Education Monitoring Report 2023: Technology in Education. The English statutory online-safety responsibilities apply in their jurisdiction; other ministries must determine their lawful duties and appropriate safeguards.
This is Chapter 148 of The Gold Standard of a Ministry of Education Reference Manual. It also connects to Commercial Marketing and Student Data Protection, Computing, Digital Literacy and AI Capability, and Education Data Governance and Interoperability.
Final principle
The gold standard of school internet filtering is not an impenetrable wall that prevents all browsing. It is an accountable digital environment where students can learn legitimately, sensitive information is protected, genuine concerns reach competent adults and technical mistakes can be repaired without abandoning safety.