Is Cyberbullying a Crime? UK & US Laws Explained

While traditional bullying has existed for generations, cyberbullying represents a relatively recent phenomenon that continues to evolve alongside digital technology. Unlike face-to-face bullying where victims typically know their tormentors, cyberbullying often occurs through anonymous digital attacks that can reach thousands of people within minutes. As our lives become increasingly intertwined with digital platforms, understanding the legal frameworks surrounding cyberbullying has never been more important.

Cyberbullying can occur across numerous digital channels—social media platforms, messaging applications, gaming environments, and forums. Its digital nature presents unique challenges for legal systems worldwide, as jurisdictional boundaries blur in online spaces. This comprehensive guide examines the current legal status of cyberbullying in the UK, US, and beyond, addressing the question that many victims, parents, educators, and lawmakers are asking: is cyberbullying actually a crime?

Legal Definition of Cyberbullying

Before addressing whether cyberbullying constitutes a criminal offence, it’s essential to understand how legal systems define this behaviour. Cyberbullying broadly refers to the use of electronic communication to bully a person, typically by sending intimidating or threatening messages. However, legal definitions vary significantly across jurisdictions.

Under current legal frameworks, cyberbullying may constitute a criminal offence when it includes:

• Repeated, targeted communication intended to threaten, harass, or intimidate
• Making credible threats of violence or harm
• Publishing private, intimate images without consent (revenge porn)
• Incitement to self-harm
• Impersonation for the purpose of damaging reputation or relationships
• Stalking behaviour conducted through electronic means

Different jurisdictions may classify these behaviours under various statutes including harassment, stalking, malicious communications, or specific cyberbullying provisions. The legal threshold typically considers factors such as intent, persistence, severity, and impact on the victim.

The challenge for legal systems worldwide has been keeping pace with rapidly evolving digital technologies and online behaviours. Many existing laws were drafted before the widespread adoption of social media and messaging platforms, creating gaps in legal protection that lawmakers continue to address through updated legislation.

What Constitutes Cyberbullying Under Law

Understanding the legal classification of cyberbullying requires examining the specific behaviours that cross the threshold from unpleasant online interaction to potentially criminal conduct. Legal systems typically distinguish between behaviours that, while hurtful, fall within the bounds of free expression, and those that constitute harassment, threats, or other prohibited acts.

Types of Online Behaviour Considered Criminal

Legal systems generally recognise several categories of online behaviour that may constitute criminal cyberbullying:

1. Harassment – Persistent, unwanted communications that cause distress, alarm, or anxiety. Most jurisdictions require a pattern of behaviour rather than isolated incidents.
2. Malicious Communications – Sending messages that are grossly offensive, threatening, or known to be false, with the intention of causing distress or anxiety.
3. Threats – Communications that threaten violence or serious harm. These are typically taken more seriously when they appear credible and specific.
4. Image-Based Abuse – Sharing intimate images without consent (sometimes called “revenge porn”), which is now specifically criminalised in many jurisdictions.
5. Incitement – Encouraging self-harm, suicide, or encouraging others to harass the victim.
6. Stalking – Monitoring, following, or repeatedly contacting someone online in a way that causes fear or distress.
7. Impersonation – Creating fake profiles or accounts to impersonate someone with the intention of damaging their reputation or relationships.

The severity of legal consequences often depends on factors like the perpetrator’s intent, the victim’s vulnerability (particularly if they are a minor), the persistence of the behaviour, and the extent of harm caused.

Differences Between Bullying and Criminal Harassment

An important legal distinction exists between behaviours classified as bullying and those that rise to the level of criminal harassment. This distinction often determines whether cyberbullying can be prosecuted as a crime.

General bullying behaviours might include name-calling, exclusion, rumour-spreading, or unpleasant comments. While these actions are harmful and may violate school policies or workplace regulations, they don’t always meet the legal threshold for criminal prosecution.

Criminal harassment typically requires:

• A pattern of repeated behaviour (rather than isolated incidents)
• Clear intent to cause fear, alarm, or distress
• Communications that go beyond merely offensive or unpleasant to threatening or seriously distressing
• A reasonable expectation that the victim would be alarmed or distressed by the communications

This distinction explains why not all instances of cyberbullying result in criminal charges, even when reported to authorities. However, legal standards continue to evolve, with many jurisdictions lowering the threshold for criminal intervention, particularly when the victims are minors or vulnerable individuals.

Educators, parents, and potential victims should understand that even when cyberbullying doesn’t meet the legal threshold for criminal prosecution, other remedies may be available through civil law, educational institutions, or platform policies.

When Does Cyberbullying Become a Criminal Offence?

The line between unpleasant online behaviour and criminal conduct can sometimes appear blurry. However, legal systems have established certain thresholds that, when crossed, transform cyberbullying into a prosecutable offence. Understanding these thresholds is crucial for victims seeking legal recourse and for potential perpetrators who may not realise their actions could result in criminal charges.

Legal Thresholds for Criminal Charges

Most legal frameworks consider several key factors when determining whether cyberbullying rises to the level of criminal conduct:

1. Intent – The perpetrator’s intention matters significantly. Communications deliberately designed to cause distress, fear, or humiliation are more likely to be considered criminal than thoughtless or impulsive comments.
2. Pattern of Behaviour – A single unpleasant message rarely meets the criminal threshold. However, persistent, repeated communications targeting the same individual often do.
3. Content Severity – The nature of the communications plays a crucial role. Messages containing threats of violence, sexual content (particularly involving minors), hate speech based on protected characteristics, or incitement to self-harm typically cross the criminal threshold more readily.
4. Reasonable Impact – Courts often apply a “reasonable person” standard, asking whether the communications would cause a reasonable person to feel threatened, harassed, or alarmed.
5. Victim Vulnerability – Actions targeting children, disabled individuals, or other vulnerable persons often face lower thresholds for prosecution.
6. Privacy Violations – Sharing private or intimate images, accessing accounts without permission, or doxxing (publishing private information) may constitute separate criminal offences.
7. Platform Terms Violations – While not necessarily criminal in themselves, violations of platform terms of service can sometimes support criminal charges by demonstrating intentional misuse.

Different jurisdictions apply these thresholds differently, but these factors consistently influence the assessment of whether cyberbullying constitutes a criminal offence.

Evidence Requirements for Prosecution

Successfully prosecuting cyberbullying cases requires specific types of evidence that can withstand legal scrutiny. Understanding these requirements can help victims properly document incidents:

1. Digital Records – Screenshots, saved messages, emails, or other records of the communications, including timestamps and context.
2. Witness Statements – Testimonies from others who observed the bullying or its effects.
3. Platform Data – Records obtained from social media companies or service providers (often requiring court orders).
4. Evidence of Identity – Proof linking the communications to the alleged perpetrator, which may require technical forensic evidence.
5. Proof of Harm – Documentation of the impact on the victim, which might include medical records, psychological assessments, school attendance records, or other evidence of distress.
6. Evidence of Pattern – Documentation showing repeated nature of the behaviour rather than isolated incidents.

Prosecutors must typically demonstrate beyond reasonable doubt that the accused person sent the communications with the requisite intent and that a reasonable person would find the communications harassing, alarming, or distressing.

The digital nature of cyberbullying presents both advantages and challenges for evidence gathering. While digital communications often leave traces, anonymisation tools, fake accounts, and the ephemeral nature of some platforms can complicate investigations. This is why prompt and thorough documentation by victims is crucial for successful prosecution.

Current Cyberbullying Laws in the United Kingdom

The United Kingdom has developed a robust legal framework to address various forms of cyberbullying, though the legislation has evolved over time rather than being created as a single comprehensive cyberbullying law. This patchwork approach means that different aspects of cyberbullying may be prosecuted under different statutes.

Communications Act 2003 Provisions

The Communications Act 2003 represents one of the UK’s most frequently used legal tools against cyberbullying. Section 127 of this Act makes it an offence to send or cause to be sent through a public electronic communications network a message or other matter that is “grossly offensive,” “indecent,” “obscene,” “menacing,” or false (if sent for the purpose of causing annoyance, inconvenience, or needless anxiety).

Key aspects of this legislation include:

1. Broad Application – The Act applies to all forms of electronic communication sent via public networks, including social media posts, emails, text messages, and online comments.
2. Intent Requirement – Prosecutors must demonstrate that the sender intended the message to be offensive or knew it was offensive.
3. Penalty – Offenders can face up to six months imprisonment, a fine, or both.
4. High Threshold – Courts have established that the threshold for “grossly offensive” is higher than merely offensive or unpleasant, requiring communications that would cause significant distress to reasonable people.

The Crown Prosecution Service (CPS) has issued guidelines to help determine when communications cross the threshold for prosecution under this Act, emphasising that context matters significantly in these determinations.

Protection from Harassment Act Applications

The Protection from Harassment Act 1997, while predating the social media era, has proven adaptable to cyberbullying cases. This Act prohibits conduct amounting to harassment, which it defines as behaviour that occurs on at least two occasions that causes alarm or distress.

Key elements of this legislation as applied to cyberbullying include:

1. Course of Conduct Requirement – The Act requires at least two instances of harassing behaviour, though these can be of different types (e.g., one email and one social media post).
2. Restraining Orders – Courts can issue restraining orders prohibiting further contact, including online contact.
3. Both Criminal and Civil Remedies – Victims can pursue both criminal charges and civil claims for damages.
4. Stalking Provisions – Amendments to the Act have specifically addressed stalking behaviour, including cyberstalking.
5. Penalties – Criminal harassment can result in up to six months imprisonment for basic harassment, while the more serious offence of putting someone in fear of violence can lead to up to ten years imprisonment.

The Act has been successfully applied in numerous cyberbullying cases, particularly those involving persistent targeting of individuals.

Online Safety Act 2023

The Online Safety Act 2023 represents the UK’s most significant recent legislative development addressing online harms, including cyberbullying. This comprehensive legislation places new duties on online platforms and creates additional protections, particularly for children.

Key provisions include:

1. Duty of Care – Platforms must take proactive measures to protect users from harmful content, including cyberbullying.
2. Age-Appropriate Design – Special protections for child users, requiring platforms to consider child safety in their design.
3. Regulatory Oversight – Ofcom has been granted new powers to enforce compliance, including the ability to impose substantial fines.
4. Criminal Offences – The Act creates new offences related to harmful communications and strengthens existing protections.
5. User Redress – Improved mechanisms for users to report harmful content and seek its removal.

This legislation significantly strengthens the UK’s approach to cyberbullying by addressing not only individual perpetrators but also the responsibilities of the platforms where such behaviour occurs.

The UK’s approach combines these primary statutes with other relevant legislation, including the Malicious Communications Act 1988, the Crime and Disorder Act 1998, and the Computer Misuse Act 1990, creating a multi-faceted legal framework to address different aspects of cyberbullying.

Current Cyberbullying Laws in the United States

The United States takes a different approach to cyberbullying legislation compared to the UK, with a complex patchwork of federal and state laws addressing various aspects of online harassment. This decentralised approach means that legal protections and definitions vary significantly depending on where a victim or perpetrator resides.

Federal Legislation on Cyberbullying

At the federal level, the United States does not have a specific comprehensive cyberbullying statute. Instead, several existing laws may apply to serious cases of cyberbullying:

1. Interstate Communications Act (18 U.S.C. § 875) – Prohibits transmitting threats to kidnap or injure another person across state lines or internationally, which can include threats sent via electronic means.
2. Computer Fraud and Abuse Act – While primarily aimed at hacking, this Act can apply to severe cyberbullying cases involving unauthorised access to accounts or systems.
3. Title IX Education Amendments – Requires schools receiving federal funding to address sex-based harassment, which can include certain forms of cyberbullying.
4. Matthew Shepard and James Byrd Jr. Hate Crimes Prevention Act – Can apply to cyberbullying motivated by bias based on race, religion, sexual orientation, gender identity, or disability.
5. Federal Stalking Statute (18 U.S.C. § 2261A) – Prohibits stalking, including cyberstalking, across state lines or within federal jurisdictions.

Federal prosecution typically focuses on the most serious cases, particularly those involving threats of violence, crossing state lines, hate crimes, sexual exploitation, or stalking.

State-by-State Legal Status

As of 2025, all 50 U.S. states have enacted laws addressing bullying, and 48 states explicitly include electronic harassment in their statutes. However, the scope and strength of these laws vary considerably:

State	Specific Cyberbullying Law	Criminal Sanctions	School Policy Required	Off-Campus Behaviour Covered
California	Yes	Yes	Yes	Yes
Florida	Yes	Yes	Yes	Yes
New York	Yes	Yes	Yes	Limited
Texas	Yes	Yes	Yes	Limited
Massachusetts	Yes	Yes	Yes	Yes
Illinois	Yes	Yes	Yes	Yes
Pennsylvania	Yes	Limited	Yes	No
Ohio	Yes	Limited	Yes	Limited
Georgia	Yes	Yes	Yes	No
Michigan	Yes	Yes	Yes	Limited

Some states have enacted specific criminal statutes targeting cyberbullying, while others address it through existing harassment or stalking laws. Key differences between state approaches include:

1. Definition Breadth – Some states define cyberbullying narrowly, while others use broader definitions that encompass more behaviours.
2. School Jurisdiction – States vary in whether they grant schools authority to discipline students for off-campus cyberbullying.
3. Criminal Penalties – Sanctions range from minor misdemeanours to serious felonies for the most egregious cases.
4. Age Considerations – Some states have different provisions for juvenile versus adult offenders.
5. Reporting Requirements – Many states mandate that schools report cyberbullying incidents to law enforcement under certain circumstances.

This variability creates significant differences in legal protection depending on location, with some states offering robust protections while others provide more limited remedies. Legal experts and advocacy groups continue to push for more consistent standards across jurisdictions.

Should Cyberbullying Be a Specific Criminal Offence?

The question of whether cyberbullying should be designated as a specific standalone criminal offence, rather than being prosecuted under existing harassment or communications laws, remains a topic of significant debate among lawmakers, educators, child safety advocates, and civil liberties organisations. There are compelling arguments on both sides of this issue.

Arguments For Specific Legislation

Proponents of specific cyberbullying criminal legislation argue that dedicated laws would provide several advantages:

1. Clearer Boundaries – Specific legislation would create clearer definitions of prohibited online behaviour, making it easier for individuals to understand what constitutes illegal conduct.
2. Modernised Approach – Dedicated cyberbullying laws could address the unique aspects of digital harassment that traditional laws, often written before the social media era, may not adequately cover.
3. Symbolic Importance – Creating specific offences signals society’s recognition of cyberbullying’s seriousness and may serve as a stronger deterrent.
4. Consistent Application – Specific legislation could help ensure more uniform application of the law across different cases and jurisdictions.
5. Targeted Sentencing Options – Purpose-built legislation could include appropriate interventions specific to cyberbullying, such as digital literacy education, rather than only traditional penalties.
6. Improved Data Collection – Specific offences would facilitate better tracking of cyberbullying prevalence and prosecution outcomes.

Child safety advocates particularly emphasise the need for laws that recognise the distinct harms of cyberbullying, noting that digital harassment can be more persistent, public, and permanently accessible than traditional bullying.

Arguments Against Specific Legislation

Those who oppose creating separate cyberbullying criminal offences raise several important counterpoints:

1. Free Speech Concerns – Overly broad cyberbullying laws might infringe on protected speech and expression, particularly for adults.
2. Existing Laws Suffice – Many argue that existing harassment, stalking, and communications laws already provide adequate tools for prosecuting harmful cyberbullying.
3. Criminalisation of Youth – Specific criminal offences might unnecessarily push young people into the criminal justice system when educational interventions might be more appropriate.
4. Definitional Challenges – Creating precise legal definitions that capture harmful cyberbullying while excluding protected speech remains extremely difficult.
5. Enforcement Difficulties – Even with specific laws, practical challenges in investigating online behaviour, establishing jurisdiction, and gathering evidence would remain.
6. Rapid Technological Change – Specific legislation might quickly become outdated as technologies and online behaviours evolve.

Civil liberties organisations frequently express concern that poorly crafted cyberbullying laws could have a chilling effect on legitimate online expression and disproportionately impact young people.

The debate continues to evolve as jurisdictions experiment with different legislative approaches and researchers gather more data on their effectiveness. Many experts suggest that the optimal approach might combine targeted legal measures with robust education, prevention programs, and platform-level interventions.

Landmark Cyberbullying Legal Cases

Examining significant legal cases provides valuable insight into how cyberbullying laws are interpreted and applied in practice. These precedent-setting cases have shaped the legal landscape and public understanding of when online behaviour crosses into criminal territory.

Cases Resulting in Criminal Charges

Several high-profile cases have resulted in criminal charges for cyberbullying behaviour, establishing important legal precedents:

1. R v. Nimmo and Sorley (UK, 2014) – Two individuals were sentenced to prison (8 and 12 weeks respectively) for sending threatening Twitter messages to feminist campaigner Caroline Criado-Perez. The case represented one of the UK’s first significant prosecutions for social media harassment under the Communications Act 2003.
2. United States v. Drew (USA, 2008-2009) – Following the suicide of 13-year-old Megan Meier, adult Lori Drew was prosecuted for creating a fake MySpace profile to harass Meier. While Drew was initially convicted under the Computer Fraud and Abuse Act, the conviction was later overturned, highlighting gaps in existing legislation.
3. Commonwealth v. Carter (USA, 2017) – Michelle Carter was convicted of involuntary manslaughter for encouraging her boyfriend’s suicide through text messages. The Massachusetts Supreme Court upheld the conviction, establishing that electronic communications encouraging suicide could constitute criminal behaviour.
4. R v. Reece Elliott (UK, 2013) – Elliott received a prison sentence for making threatening Facebook posts targeting American students, causing thousands of students to stay home from school. The case demonstrated the international reach of cyberbullying laws.
5. Case of David Barton (UK, 2022) – Barton received a suspended sentence and restraining order for creating fake social media accounts to harass multiple victims, including former colleagues. The case illustrated the application of the Malicious Communications Act to sophisticated, persistent online harassment.
6. People v. Marquan M. (USA, 2014) – This New York case involved a teenager charged under a local cyberbullying law for creating a Facebook page posting embarrassing sexual information about classmates. While the specific local law was struck down as overly broad, the case influenced subsequent, more carefully crafted legislation.

Legal Precedents Established

These and other cases have established several important legal principles regarding cyberbullying:

1. Intent Standard – Courts have clarified that prosecutors must generally demonstrate that perpetrators intended to cause distress, rather than merely showing that distress resulted.
2. Reasonable Person Test – Legal systems increasingly apply a “reasonable person” standard to determine whether communications would cause alarm or distress to a typical person.
3. Jurisdictional Reach – Cases have established that individuals can be prosecuted for cyberbullying even when they are physically located in different jurisdictions from their victims.
4. School Authority Limits – Various cases have defined the extent to which schools can discipline students for off-campus online speech, with courts generally requiring a substantial disruption to the school environment.
5. Platform Responsibility – While not criminal cases, civil litigation has begun to define the responsibility that platforms have to address cyberbullying occurring on their services.
6. Consequences of Inaction – Several cases involving school officials or parents who were aware of cyberbullying have established potential liability for failing to intervene appropriately.

These legal precedents continue to evolve as courts confront new technologies and novel forms of online harassment. The outcomes of these cases demonstrate that while prosecuting cyberbullying presents challenges, legal systems are increasingly willing to hold perpetrators accountable, particularly in severe cases involving threats, persistent harassment, or tragic outcomes.

What To Do If You’re Experiencing Cyberbullying

If you or someone you know is experiencing cyberbullying, understanding the appropriate steps to take can be crucial for both immediate protection and potential legal action. Taking a systematic approach can help address the situation effectively while preserving evidence that might be needed later.

Documenting Evidence for Legal Action

Proper documentation is essential if cyberbullying escalates to a level requiring legal intervention:

1. Screenshot Everything – Capture screenshots of all harassing messages, posts, comments, or images. Include the full context, visible dates, times, and usernames.
2. Save Original Messages – Beyond screenshots, preserve original messages where possible (don’t delete emails, texts, or direct messages).
3. Document URL Links – Record the web addresses where harassing content appears.
4. Maintain a Chronological Log – Create a detailed timeline noting:
   • Date and time of each incident
   • Platform where it occurred
   • Content of the communication
   • Any witnesses
   • Your response (if any)
   • Any physical or emotional effects experienced
5. Record Witness Information – Note the names and contact details of anyone who witnessed the cyberbullying or its effects.
6. Save Related Communications – Keep records of any communications with platforms, schools, employers, or authorities about the incidents.
7. Preserve Physical Evidence – Document any related physical evidence, such as declining academic performance, medical appointments resulting from stress, or changes in routine due to fear.

Evidence should be stored securely, with backups in multiple locations. This documentation can be crucial for reporting to authorities, pursuing civil remedies, or supporting school or workplace disciplinary actions.

When and How to Contact Authorities

Knowing when and how to escalate cyberbullying to authorities can be challenging. Consider these guidelines:

When to Contact Police:

• When communications contain explicit threats of physical harm
• If the bullying involves sexual content or exploitation, particularly of minors
• When cyberbullying includes hate crime elements based on protected characteristics
• If the perpetrator has violated existing court orders
• When the harassment is extreme, persistent, and causing significant distress
• If the cyberbullying involves identity theft, hacking, or other computer crimes

How to Report:

1. Local Police – Begin with your local police force, particularly for immediate threats. In the UK, you can report online via the police website or by calling 101 (or 999 in emergencies).
2. School Authorities – If the cyberbullying involves students, report to school leadership who have specific obligations to address bullying.
3. Platform Reporting – Report harassing content directly to the platforms where it appears using their built-in reporting mechanisms.
4. Specialist Units – Some police forces have dedicated cybercrime or online harassment units with specialised expertise.
5. CEOP – In cases involving child sexual exploitation, the Child Exploitation and Online Protection command can be contacted directly.
6. Professional Organisations – If the harassment occurs in a professional context, professional regulatory bodies may need to be informed.

When contacting authorities, be prepared with your documented evidence, a clear chronology of events, and specific concerns about safety or wellbeing. Understand that not all cyberbullying will meet the threshold for criminal investigation, but reporting creates an official record and may reveal patterns of behaviour affecting multiple victims.

Beyond reporting, seeking support from counsellors, support groups, or mental health professionals can be important for addressing the psychological impact of cyberbullying. Organisations like the Cybersmile Foundation, Bullying UK, and the National Bullying Helpline provide resources and support for victims of cyberbullying.

Frequently Asked Questions About Cyberbullying Laws

Conclusion

The legal landscape surrounding cyberbullying continues to evolve as digital communications become increasingly central to our lives. While the answer to “Is cyberbullying a crime?” isn’t straightforward, it’s clear that many cyberbullying behaviours can indeed constitute criminal offences under various laws addressing harassment, malicious communications, threats, and stalking.

The most severe forms of cyberbullying—those involving threats, persistent harassment, sharing of intimate images, or targeting vulnerable individuals—are increasingly likely to result in criminal charges and significant penalties. Both the UK and US have strengthened their legal frameworks in recent years, though approaches vary significantly between jurisdictions.

For victims, understanding the legal thresholds and documentation requirements can be crucial in seeking protection and justice. Meanwhile, potential perpetrators should recognise that online actions carry real-world legal consequences, and what might seem like anonymous digital behaviour can often be traced and prosecuted.

Moving forward, effective approaches to cyberbullying will likely combine:

• Continued legal evolution to address emerging forms of digital harassment
• Platform responsibility for creating safer online environments
• Educational initiatives to promote digital citizenship
• Support services for those experiencing online abuse
• Preventative programs addressing the root causes of bullying behaviour

By addressing cyberbullying through this multi-faceted approach, societies can work toward creating digital spaces that foster communication and connection without harassment or abuse.

If you’re experiencing cyberbullying, remember that help is available. Document the behaviour, report it to relevant platforms and authorities, and seek support from trusted individuals and organisations specialising in digital wellbeing and online safety.