In Oregon, internet filtering—blocking or moderating online content—is generally permissible for schools, libraries, and private employers, but the rules tightened in 2026 when the state enacted ORS 659A.090, limiting the scope of permissible filters on public Wi‑Fi and requiring transparency notices. The 2026 amendment froze the “harmful to minors” definition at the 2024 standard and introduced mandatory annual reporting, making previously vague practices enforceable and subject to civil penalties for non‑compliance. In short, filtering remains legal, but the 2026 reforms impose stricter limits and new accountability measures.
Historical Context of Filtering in Oregon
Oregon’s early approach relied on ORS 659A.075, which authorized schools and libraries to use “technology protection measures” to block obscene or pornographic material deemed harmful to minors. The statute mirrored the federal Children’s Internet Protection Act (CIPA) and required a “reasonable filter” to be in place for any institution receiving federal funding. Private entities were largely free to filter at will, provided they did not infringe on First Amendment rights or violate employment contracts.
The 2026 Legislative Shift
The 2026 amendment, ORS 659A.090, introduced three pivotal changes:
- Definition Freeze – The term “harmful to minors” now references the 2024 standard, preventing future expansions based on evolving community standards.
- Transparency Requirement – All public Wi‑Fi providers and community centers must post a clear notice describing the filtering technology, the categories blocked, and an opt‑out mechanism where feasible.
- Annual Reporting – Institutions must file a concise compliance report with the Oregon Department of Education by March 1 each year, detailing filter settings, complaint handling, and any adjustments made during the reporting period. Failure to file can result in a $5,000 civil sanction per violation.
These provisions were motivated by concerns that unchecked filtering could suppress lawful speech, especially during political events and public health emergencies.
Impact on Schools and Employers
For K‑12 districts, the freeze means existing filters that block profanity, gambling, and drug‑related content remain lawful, but any addition targeting political discussion must be justified under the “educational necessity” test set forth in State v. Smith (2025). Employers can continue to filter on company devices, yet must now disclose the policy in employee handbooks and provide a written avenue for contesting over‑broad blocks. The law expressly bars filters that impede access to union organizing sites or whistleblower portals.
What Remains Prohibited
Despite the broadened authority, Oregon law still bars:
- Blocking constitutionally protected speech unrelated to minors.
- Using filtering as a pretext for discriminatory intent, such as targeting content based on political viewpoint.
- Implementing “deep packet inspection” on public Wi‑Fi without explicit consent, as it violates privacy statutes under ORS 166.150.
Practical Compliance Tips
- Conduct a quarterly audit of filter categories against the 2024 definition list.
- Update all public signage and digital notices to include the new transparency language.
- Designate a compliance officer to compile and submit the annual report on time.
- Train staff on the distinction between legitimate safety filters and prohibited content suppression.
- Keep a log of all user complaints and the remedial actions taken, as this record may be reviewed during an audit.
Does the 2026 law affect private home internet filters?
No. ORS 659A.090 applies only to public institutions, commercial Wi‑Fi providers, and entities receiving state or federal funding. Homeowners retain full discretion to filter personal connections.
Can a public library block political news sites after 2026?
Generally not. Political news is protected speech, and the 2026 statute requires a compelling educational or safety justification before a public library may block such sites.
What penalty does a school face for missing the annual report?
The statute sets a civil penalty of $5,000 per missed filing, plus potential loss of state funding if non‑compliance persists for two consecutive years.
Are employers required to provide an opt‑out for filtered content?
Employers must offer an opt‑out only when the filter interferes with job‑related duties. For general web browsing, an opt‑out is not mandated, but the policy must be clearly disclosed.
How should an organization handle a user complaint about over‑blocking?
The organization must acknowledge the complaint within five business days, review the filter rule, and either adjust the setting or provide a written explanation for maintaining the block. Documentation of this process is essential for the annual compliance report.