Ban, regulate or reform? Social media & under-15s – The India question

What Happened

India is actively debating whether to impose a ban on social media access for children under 15, with experts, government officials, and civil society divided on the appropriate regulatory approach.
The debate has been catalysed by: growing evidence of social media's role in addiction, cyberbullying, body image distortion, and mental health harm among adolescents; and the global precedent set by Australia's world-first social media age ban in November 2024.
Three broad regulatory positions have emerged: (a) Outright ban — prohibiting under-15s from holding social media accounts; (b) Regulation — mandatory parental consent, age verification, algorithmic restrictions; (c) Reform — redesigning platform architecture and prioritising digital literacy.
India's existing legal framework — the Digital Personal Data Protection Act (DPDPA) 2023 — already provides a basis for protecting children's data, but does not amount to a social media ban.
Experts note that design reform (limiting recommendation algorithms, removing infinite scroll, restricting notifications) may be more effective than blanket bans, which are difficult to enforce and may drive children to less moderated spaces.
The decision will affect hundreds of millions of young users given India's 600+ million internet users, a significant proportion of whom are minors.

Static Topic Bridges

Digital Personal Data Protection Act (DPDPA) 2023 — Children's Data Provisions

The DPDPA 2023 is India's first comprehensive data protection law, passed by Parliament in August 2023. It introduces robust protections for children's personal data that are directly relevant to the social media debate.

Section 2(f): "Child" is defined as any individual under 18 years of age — India's threshold is stricter than the GDPR (13-16 years) and COPPA (13 years).
Section 9: Data Fiduciaries must obtain verifiable parental/guardian consent before processing any personal data of a child.
Section 9(3): Prohibits behavioral monitoring, tracking, profiling, and targeted advertising directed at children — these prohibitions have no exemptions.
Data Fiduciaries must not undertake processing with detrimental effect on the "well-being" of a child (though "detrimental effect" is not further defined in the Act).
DPDP Rules 2025 introduced exemptions from parental consent for specific purposes: child protection duties, government benefit issuance, real-time safety tracking, and blocking harmful content.
Violation of children's data provisions attracts penalties of up to ₹200 crore for data fiduciaries under the Act's penalty schedule.
The Data Protection Board of India (DPBI) is established as the adjudicatory body.

Connection to this news: The DPDPA 2023 provides India's current statutory floor for children's online protection — but it falls short of an access ban. The debate is essentially about whether to supplement the DPDPA with a stronger platform-level prohibition analogous to Australia's model.

Australia became the first country in the world to legislatively ban children under 16 from holding social media accounts, passing the Online Safety Amendment (Social Media Minimum Age) Act 2024 in its Parliament on 29 November 2024, with the ban taking effect on 10 December 2025.

Minimum age: 16 years — applies to Instagram, TikTok, Snapchat, Facebook, X (Twitter), Reddit, Threads, Twitch, Kick, YouTube.
Obligation: Platforms must take "reasonable steps" to prevent under-16s from having accounts — they bear the burden of enforcement, not individual users or parents.
Penalty: Up to AUD $49.5 million for platforms that fail to comply.
No penalties on minors or parents — the law explicitly exempts individuals from punishment.
Exclusions: Messaging apps, online gaming, education platforms, and health support services are exempt.
Age verification methods: Must include alternatives to ID-based verification (e.g., selfie estimation, database checks).
Enforcement: eSafety Commissioner and Minister for Communications jointly oversee implementation.

Connection to this news: Australia's Act is the direct comparator being invoked in India's debate. It represents the strictest global approach — placing full burden on platforms rather than users or parents — and serves as a template that Indian regulators are evaluating for adaptation to India's scale and context.

IT Act 2000 and IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021

India's broader digital regulatory architecture rests on the Information Technology Act 2000, under which the Intermediary Guidelines were framed. These rules impose due diligence and grievance redressal obligations on social media platforms.

IT Act 2000 (Section 79): "Safe harbour" protection for intermediaries — platforms not liable for third-party content if they observe due diligence.
IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 (notified under IT Act):
Significant Social Media Intermediaries (SSMIs) — platforms with 5 million+ registered users — face enhanced obligations.
Must appoint a Grievance Officer, Compliance Officer, and Nodal Contact Person based in India.
Must remove flagged content (especially related to children) within 72 hours (sexual content) or 36 hours (emergency orders).
The Rules originated partly from a Supreme Court direction (December 2018) to eliminate child pornography on social platforms.
2023 Amendment to Rule 3(1)(d): Added "misinformation" as prohibited content category; platforms must not host content that is "patently false and untrue" and could cause public order harm.
MeitY (Ministry of Electronics and Information Technology) administers these rules; MIB administers OTT/digital media ethics code portions.

Connection to this news: The IT Rules 2021 already impose content-related obligations on platforms vis-a-vis children's safety, but they do not address access restriction by age. A social media ban for under-15s would require either amendment of these Rules or new standalone legislation.

Key Facts & Data

DPDPA 2023: Defines "child" as under 18; requires verifiable parental consent; bans behavioral targeting of children; penalties up to ₹200 crore.
Australia's Online Safety Amendment Act 2024: World's first social media age ban; minimum age 16; effective December 10, 2025; platforms liable up to AUD $49.5 million.
COPPA (Children's Online Privacy Protection Act, USA): Minimum age 13 for data collection without parental consent — the global baseline India may exceed.
GDPR (EU): Age of digital consent ranges 13-16 depending on EU member state.
India internet users: 600+ million; significant share are minors.
IT Rules 2021: SSMIs (5 million+ users) — include Instagram, YouTube, Twitter/X, WhatsApp, Telegram — face enhanced obligations.
Grievance removal timeline (IT Rules): 72 hours for child sexual abuse material; 36 hours for emergency government orders.