Yes, an employer can lawfully block websites, although ideally, they will have an appropriate company policy to cover this area. For example, specific images and videos found online may be illegal to view anyway! However, regarding social media and personal browsing during work time, good practice suggests that the employer should be setting boundaries to personal use in policy rather than banning it outright.