What Happened
- Karnataka Chief Minister Siddaramaiah announced during the 2026-27 state budget speech that the use of social media will be prohibited for children under the age of 16, citing adverse effects of mobile phone usage on children's mental health.
- Karnataka thus became the first Indian state to formally announce such a ban, with Andhra Pradesh signalling similar intent.
- No draft legislation, age verification mechanism, or implementation timeline has been produced following the announcement — critics note the ban exists as a policy signal rather than enforceable law.
- Legal analysts raised two fundamental challenges: (1) constitutional competence — digital regulation falls under the Union list, not state subjects; (2) enforcement — meaningful age verification would require Aadhaar-linked identity checks, creating privacy risks.
- The announcement comes amid a global wave of similar proposals — Australia enacted a social media ban for under-16s in 2024; US states have debated comparable measures.
Static Topic Bridges
Digital Personal Data Protection Act, 2023 (DPDP Act) and Children's Data
The Digital Personal Data Protection Act, 2023, passed by Parliament and notified in August 2023, is India's first comprehensive data protection legislation. It treats any individual below 18 years as a "child" and imposes heightened obligations on data fiduciaries (entities processing personal data) when handling children's data.
- Section 9 of the DPDP Act: Data fiduciaries must obtain verifiable parental consent before processing a child's personal data (i.e., any person below 18 years).
- Data fiduciaries cannot process children's data in a manner that causes detrimental effects on well-being, or undertake behavioural monitoring or targeted advertising directed at children.
- Age verification obligation: Platforms must determine whether a user is a child and obtain parental consent — but the Act leaves the mechanism of verification to be specified by rules (not yet finalised as of early 2026).
- Significant Data Fiduciaries (SDFs): Notified categories of high-risk data processors (likely to include major social media platforms) face additional obligations.
- Karnataka's proposed ban conflicts with the DPDP Act's framing: the Act allows children to use platforms with parental consent — a ban removes consent as an option.
Connection to this news: Karnataka's ban implicitly acknowledges that the DPDP Act's consent-based approach may be insufficient to protect children. The state is proposing a prohibition where the central law allows permissioned access — a tension that cannot be resolved without central legislative action.
IT Act, 2000, Intermediary Rules, and Constitutional Jurisdiction
The Information Technology Act, 2000 (IT Act) and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 form the primary regulatory framework for digital platforms in India. Under the Seventh Schedule of the Constitution, "communication" and the regulation of electronic media fall within the Union List (List I), specifically Entry 31 (Posts, telegraphs, telephones, wireless, broadcasting) and Entry 97 (Residuary powers).
- IT Act, 2000: Governs cyber crimes, electronic contracts, digital signatures, and intermediary liability.
- Section 79 of IT Act: Safe harbour for intermediaries (platforms not liable for third-party content if they follow due diligence); amended by 2021 Rules.
- IT Rules, 2021: Require large social media intermediaries (significant social media intermediaries, or SSMIs — those with 5 million+ registered users in India) to appoint a Grievance Officer, Nodal Officer, and Chief Compliance Officer.
- POCSO Act, 2012 (Protection of Children from Sexual Offences): Section 13 prohibits using children in pornographic material online; platforms are required to report such content.
- Constitutional question: Any state law attempting to bar children from social media platforms would directly regulate digital intermediaries — a Union subject — and would likely be struck down or require presidential assent.
Connection to this news: Karnataka's announcement, while well-intentioned, faces a fundamental jurisdictional problem. Any enforceable ban would need to be enacted by Parliament, not a state legislature, unless framed narrowly as a public health measure — which would still face proportionality scrutiny under the privacy jurisprudence of Justice KS Puttaswamy v. Union of India (2017).
Right to Privacy and Age Verification Systems
The Supreme Court's landmark nine-judge bench ruling in Justice KS Puttaswamy (Retd.) v. Union of India (2017) held that the right to privacy is a fundamental right under Article 21 of the Constitution. Any state action restricting privacy must satisfy a three-part test: legality (backed by law), legitimate aim, and proportionality (least restrictive means).
- Aadhaar-linked age verification: The most technically feasible method in India's digital context — but requires every social media user to link their biometric identity, creating a centralised surveillance infrastructure for the entire internet-using population.
- Internet Freedom Foundation and civil society have flagged that Aadhaar-based age gating would destroy online anonymity for adults too — a disproportionate measure under Puttaswamy.
- Alternative approaches: Self-certification by parents, school-based digital identity, device-level parental controls — each with limitations.
- Australia's Online Safety Amendment (Social Media Minimum Age) Act 2023: Imposes liability on platforms (not users) for allowing children under 16; enforcement mechanism is platform compliance audits rather than universal identity verification.
Connection to this news: The Puttaswamy framework means that even a well-drafted central law mandating age verification for social media must demonstrate proportionality — that no less privacy-invasive alternative exists. Karnataka's announcement has not yet addressed this constitutional threshold.
Key Facts & Data
- Karnataka: First Indian state to formally announce a social media ban for children under 16 (2026 budget speech).
- DPDP Act, 2023, Section 9: Verifiable parental consent required before processing data of persons under 18.
- IT Act, 2000: Primary Union legislation governing digital intermediaries.
- IT Rules, 2021: Large platforms (5 million+ users) must appoint Grievance Officer, Nodal Officer, Chief Compliance Officer.
- POCSO Act, 2012: Prohibits online sexual abuse material involving children; mandatory reporting.
- Puttaswamy judgment (2017): Privacy is a fundamental right under Article 21; restrictions must satisfy legality, legitimate aim, and proportionality.
- Seventh Schedule, List I, Entry 31: "Posts, telegraphs, telephones, wireless, broadcasting" — Union subject.
- India defines "child" under DPDP Act: Anyone below 18 years.
- Australia: Social media ban for under-16s enacted in 2024, placing compliance burden on platforms.