Cyberbullying Prevention’s Thorny First Amendment Questions

Few policy goals enjoy broader public support than protecting children from online cruelty, yet few collide so directly with the First Amendment’s near-absolute hostility to government control of speech. Cyberbullying statutes ask the state to punish words—often the words of minors, often clumsy, cruel, and unquestionably hurtful—and the law has long insisted that hurtfulness alone is not a basis for criminal or disciplinary liability. The result is a body of doctrine in which legislatures keep drafting bullying laws and courts keep testing whether those laws sweep in protected expression. The tension is not academic. It determines whether a teenager’s late-night post is a punishable offense, a school disciplinary matter, or constitutionally shielded speech that the government may not touch at all.

Why “just ban it” runs into the Constitution

The instinct to outlaw bullying outright founders on two related doctrines: overbreadth and vagueness. A statute is overbroad when, in the course of reaching unprotected conduct, it also criminalizes a substantial amount of speech the Constitution protects. It is unconstitutionally vague when it fails to give ordinary people fair notice of what is forbidden and invites arbitrary enforcement. Cyberbullying is a notoriously slippery target for legislative drafting because the conduct legislatures want to reach—sustained, targeted harassment of a vulnerable child—shades imperceptibly into speech that is merely rude, mocking, or unkind. Caustic commentary, satire, and even cruelty are, as a general matter, protected; the line between a cutting joke and actionable harassment is exactly where these statutes tend to break down.

New York’s highest court illustrated the problem in People v. Marquan M., where it struck down an Albany County cyberbullying ordinance under which a teenager had been charged for posting sexual rumors about classmates on a pseudonymous social-media page. The Court of Appeals found the law of “alarming breadth,” reaching far beyond the bullying of children to cover essentially any communication intended to annoy or embarrass anyone. The court declined to rescue the statute through narrowing construction, reasoning that saving it would require rewriting it—a job for the legislature, not the bench. Significantly, the court did not hold that cyberbullying may never be criminalized; it held that the First Amendment permits a prohibition “directed at children, depending on how that activity is defined.” The constitutional defect lay in drafting, not in the underlying goal.

When the speaker and target are students

A large share of cyberbullying involves minors speaking to or about other minors, which drags in the distinct constitutional rules governing student speech. Since Tinker v. Des Moines, public schools have been permitted to regulate student expression that materially and substantially disrupts the educational environment or invades the rights of others—a standard far more permissive than the one applied to adults in public. That second prong, the invasion of others’ rights, is the natural home for school-based cyberbullying discipline.

The reach of school authority narrowed in Mahanoy Area School District v. B.L., where the Supreme Court held 8–1 that a Pennsylvania district could not discipline a student for a profane, off-campus Snapchat venting about not making the varsity cheer squad. The Court declined to announce that schools may never reach off-campus speech, but it held that they have diminished authority there and identified considerations that weaken their interest—the speaker is off campus, parents bear primary responsibility, and the school is not acting in loco parentis around the clock. Crucially for bullying policy, the majority expressly preserved a school’s interest in addressing “serious or severe bullying or harassment targeting particular individuals” and threats aimed at teachers or students. Mahanoy thus did not immunize cyberbullying; it required schools to show that the speech reaches the kind of targeted harm that justifies intervention rather than mere offensiveness.

The threat line and the looming mens rea question

Where cyberbullying tips into menace, it intersects the “true threats” doctrine, one of the recognized categories of unprotected speech. The foundational case, Watts v. United States, distinguished a genuine threat from crude political hyperbole, and the Court later explained in Virginia v. Black that true threats encompass statements through which a speaker means to communicate a serious intent to commit unlawful violence against an individual or group. The doctrine matters for online harassment because much of the most frightening cyberbullying takes the form of threatening messages, and because much of it is anonymous, decontextualized, and easy to misread.

What the doctrine has not settled is how culpable a speaker must be. In Elonis v. United States, the Court reversed a conviction based on violent Facebook posts about the defendant’s estranged wife, holding that negligence—asking only whether a reasonable person would feel threatened—is not enough to support a criminal conviction for threatening speech. But the Court deliberately left open whether recklessness would suffice or whether the Constitution demands proof of subjective intent. That unresolved question is more than a technicality for cyberbullying enforcement: an objective, reasonable-listener standard risks punishing the awkward, the impulsive, and the genuinely misunderstood, while a strict intent requirement may let serial harassers escape by professing that they never meant their words to land.

As of early 2023, the Court is poised to confront the issue squarely. It has granted review in Counterman v. Colorado, a stalking prosecution built on a relentless stream of unsolicited Facebook messages, to decide what mental state the First Amendment requires before a true-threats conviction may stand. Because so much harassment and bullying liability turns on how a recipient perceives a message, the outcome will reshape the constitutional floor beneath every cyber-harassment, stalking, and bullying statute in the country.

Civil remedies and platform conduct

Criminal and school-discipline routes are not the only ones. Targets of online abuse increasingly pursue civil claims—defamation, intentional infliction of emotional distress, harassment, and the tort of public disclosure of private facts—which carry their own constitutional limits but operate without the state directly criminalizing speech. These avenues come with practical obstacles: anonymous speakers are hard to unmask, judgment-proof minors are hard to collect from, and intermediary platforms have historically been shielded from liability for content their users post. Schools, meanwhile, frequently regulate cyberbullying through codes of conduct rather than penal statutes, which raises the Tinker/Mahanoy questions rather than the overbreadth-and-vagueness questions that doom poorly drafted criminal laws. The constitutional analysis shifts with the enforcer.

What a defensible statute looks like

Reading the cases together, a pattern emerges for legislation likely to withstand challenge. Such a law targets a course of conduct—repeated, sustained contact—rather than a single ill-considered post. It requires that the conduct be directed at a specific individual rather than the public at large. It builds in a meaningful mental-state requirement instead of resting on how a hypothetical reasonable person would react. It defines its terms—“harass,” “intimidate,” “abuse”—with enough precision to give fair notice and cabin enforcement discretion. And, where the target is a minor, it may legitimately invoke the state’s heightened interest in protecting children, an interest courts have repeatedly acknowledged even while policing the means. Several states have moved toward this model by folding cyber-harassment into existing stalking and harassment frameworks rather than enacting freestanding “cyberbullying” crimes, a drafting choice that borrows the constitutional pedigree those older statutes already enjoy. The same constitutional logic that governs novel surveillance tools applies here—the technology is new, but the doctrinal questions are old.

For now, the field remains unsettled. The school-speech rules tightened after Mahanoy, the criminal rules await clarification from Counterman, and the patchwork of state statutes ranges from carefully tailored to constitutionally fragile. What is clear is that the constitutional objection to cyberbullying laws has never been that children should endure online cruelty; it is that the state may not protect them with instruments so blunt they capture protected speech in the bargain. Further developments are tracked in the case tracker, and the broader thread of digital-age speech and privacy doctrine continues across the commentary. This publication offers analysis and commentary, not legal advice.