Cyberbullying Laws: What Parents Need to Know About Legal Consequences

Most parents assume that cyberbullying is either handled entirely by schools or that there is nothing law enforcement can actually do about it. Both assumptions are wrong — but so is the expectation that there is one clear, consistent legal framework parents can rely on.

The legal landscape around cyberbullying is fragmented, rapidly evolving, and varies significantly by state, province, and country. What constitutes a criminal matter versus a school disciplinary matter versus a civil case is not always obvious. Here is what the law actually says — and what it does not.

The United States: State-by-State Patchwork

There is no single federal cyberbullying law in the United States. What exists is a patchwork of 50 different state approaches. As of 2025, all 50 states have laws addressing bullying, and the majority now explicitly extend those protections to electronic communications — but the definitions, thresholds, and penalties vary widely.

Most state anti-bullying laws mandate that school districts have formal policies, investigate reported incidents, and take disciplinary action. Critically, many of these policies now apply to conduct that occurs off school grounds if it creates a hostile school environment or disrupts the educational process — meaning that harassment conducted entirely from a child's bedroom, on their own devices, can still result in school consequences.

Where cyberbullying crosses into criminal territory depends on the specific behavior:

• Harassment and stalking statutes in most states cover repeated, targeted electronic communications designed to cause fear or distress. These are criminal charges.
• Threats of violence — including threats communicated via social media, text, or messaging apps — are criminal in all jurisdictions.
• Sextortion and distribution of intimate images of minors constitutes federal child pornography law regardless of who created the images or how they were obtained. This is among the most aggressively prosecuted categories.
• Identity theft and impersonation online is criminal in most states and is sometimes used in cyberbullying prosecutions when perpetrators create fake accounts in a victim's name.

Penalties when charges are filed can include fines, community service, probation, mandatory counseling, suspension from school, and in severe cases, juvenile detention records. Adults who cyberbully minors face adult criminal charges that can include felony-level harassment, stalking, or child exploitation charges.

The United Kingdom

The UK does not have a dedicated cyberbullying law, but existing legislation covers the behavior effectively. The Malicious Communications Act 1988 and the Communications Act 2003 both criminalize the sending of messages that are grossly offensive, threatening, or indecent via electronic networks. The Protection from Harassment Act 1997 covers sustained campaigns of online harassment.

For the most serious cases — grooming, sextortion, and the sharing of intimate images without consent — the Online Safety Act 2023 significantly expanded enforcement powers and placed new legal duties on platforms to protect users, particularly minors. Ofcom now has regulatory authority to fine platforms that fail to protect children from harm.

Schools in England and Wales are legally required to have anti-bullying policies that address cyberbullying. Headteachers have the legal power to discipline students for conduct outside school hours when it affects the school community.

Canada

Canada's Criminal Code provisions on criminal harassment, uttering threats, intimidation, and defamatory libel all potentially apply to cyberbullying conduct. Several provinces have also enacted specific legislation: Nova Scotia's Intimate Images and Cyber-Protection Act (though a 2015 Supreme Court ruling struck down some provisions) and Manitoba's Protection Against Stalking Act are examples of provincial-level responses.

The most significant federal action came through amendments to the Criminal Code addressing the non-consensual sharing of intimate images, which carries a maximum five-year prison sentence. For minors who share intimate images of other minors, prosecution under child pornography laws is also possible.

Canada's provinces generally require schools to have anti-bullying policies with explicit cyberbullying provisions, and many provinces have legislation mandating school intervention even for off-campus conduct.

Australia and New Zealand

Australia operates through both federal and state-level legislation. The Online Safety Act 2021 (federal) established the eSafety Commissioner, who has the power to require platforms to remove cyberbullying material targeting Australian children within 24 hours of a formal complaint. This is among the strongest platform-level enforcement mechanisms in the world.

State-level criminal codes cover harassment, menacing communications, and the non-consensual sharing of intimate images. In New Zealand, the Harmful Digital Communications Act 2015 was specifically designed to address online harassment and includes a tiered system from Approved Agencies (who can request content removal) through to civil court orders and criminal prosecution for the most serious cases.

What Legal Consequences Actually Look Like in Practice

Here is the honest picture: criminal prosecution of a minor for cyberbullying is rare. Police, prosecutors, and courts tend to treat juvenile-on-juvenile harassment as a school matter first unless the conduct is extreme. This means that for the vast majority of cyberbullying situations, the practical mechanisms available to parents are platform reporting, school complaints, and civil remedies — not criminal charges.

Where criminal prosecution does happen:

• Sextortion cases, especially those involving adults targeting minors
• Cases involving serious threats of violence
• Cases where harassment causes verifiable, significant harm and has been documented over time
• Cases involving identity theft or impersonation

The single most important practical step a parent can take when cyberbullying begins is documentation. Screenshots of every incident, with timestamps, usernames, and the platform visible. This documentation is the foundation for school complaints, platform abuse reports, and if necessary, police reports. Without it, cases become one person's word against another's.

The School Complaint Is Often the Most Effective Tool

For the majority of cases, the school's disciplinary process is faster, more accessible, and has more immediate impact on a child's daily life than any legal proceeding. Most cyberbullying involves children who attend the same school. Getting the school administration involved formally — in writing — creates a documented record and typically triggers mandatory investigation protocols.

If a school fails to act adequately on a documented complaint, most education departments have escalation paths to regional or national oversight bodies.

A Note on Solutions

Reactive legal tools are one part of the picture. The research is clear that families who have established open communication channels, clear household rules about online behavior, and age-appropriate safety education before an incident occurs are significantly better positioned to respond effectively when something happens.

The Child Safety Action Kit covers the practical foundation — family agreements for online conduct, documentation protocols, escalation frameworks, and age-specific conversations for children aged 6 through 13. Get the complete toolkit at /child-safety-action-kit/.

Laws exist. The more important question is whether your family has a plan to use them.