What Happened
- A parliamentary committee has backed the introduction of age-based restrictions on social media platforms for children and adolescents in India.
- The Committee on Empowerment of Women recommended KYC-based identity and age verification across social media platforms, dating apps, and gaming services.
- The government is considering a graded three-tier framework: stricter controls for under-12, differentiated rules for 12–16, and a third tier for 16–18 year olds.
- States like Karnataka have announced plans to ban social media for under-16s via the 2026-27 Budget, while Andhra Pradesh has formed a Group of Ministers to study the issue.
- Discussions with industry platforms are already underway, with mandatory KYC being evaluated to eliminate fake accounts.
Static Topic Bridges
Digital Personal Data Protection Act, 2023 (DPDPA)
India's Digital Personal Data Protection Act, 2023 (No. 22 of 2023) is the country's first comprehensive data protection law. Section 9 of the Act specifically governs processing of personal data of children, defining a child as anyone under 18 years of age — a threshold stricter than the GDPR (13–16 years) or the US COPPA (13 years). The Act mandates verifiable parental consent before any data fiduciary can process a child's personal data.
- Section 9 prohibits behavioral monitoring, tracking, and targeted advertising directed at children.
- Data fiduciaries must not process data in a manner "likely to cause detrimental effect on the well-being of a child."
- Penalty for non-compliance with children's data provisions: up to ₹150 crore.
- The DPDP Rules 2025 allow limited exemptions for educational institutions, transport providers, and child safety functions.
Connection to this news: The parliamentary committee's recommendation for KYC-based age verification operationalizes the intent of Section 9 of the DPDPA — translating the law's child-protection mandate into a concrete platform-level enforcement mechanism.
Right to Privacy and Digital Rights of Children
The right to privacy was recognized as a fundamental right under Article 21 of the Constitution by the Supreme Court in Justice K.S. Puttaswamy v. Union of India (2017). Children's digital rights exist at the intersection of this right to privacy, the right to education (Article 21A), and the state's duty to protect children under Article 39(f) which directs the state to ensure children are not exploited.
- Article 21 (right to life and personal liberty) includes informational privacy.
- Article 39(f): State shall ensure that children are given opportunities and facilities to develop in a healthy manner, free from exploitation and moral and material abandonment.
- The Puttaswamy judgment (9-judge bench) identified "right to be forgotten," data minimization, and purpose limitation as aspects of privacy.
- Parliament's role in regulating social media is anchored in Entry 97 of the Union List (residuary powers) and Entry 31 (Posts and telegraphs, telephones, wireless, broadcasting).
Connection to this news: Age-based social media restrictions represent a legislative effort to balance children's right to free expression and access to information against the state's protective duties under Article 39(f) and the privacy framework established in Puttaswamy.
Information Technology Act, 2000 and Social Media Regulation
The Information Technology Act, 2000 is the primary legislation governing cyberspace in India. Section 79 grants intermediary liability exemptions to social media platforms conditional on compliance with due diligence norms. The IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 classified large social media platforms (over 50 lakh users) as "Significant Social Media Intermediaries" (SSMIs) with enhanced compliance obligations.
- IT Rules 2021 require SSMIs to appoint a Grievance Officer, Nodal Contact Person, and Chief Compliance Officer.
- SSMIs must publish monthly transparency reports.
- Rule 4(4) of IT Rules 2021 requires SSMIs to deploy technology-based measures for identifying first originator of harmful messages.
- The proposed KYC mandate would require amendment to the IT Act or a standalone legislation.
Connection to this news: The parliamentary committee's push for mandatory KYC for all users would represent a significant expansion of existing IT intermediary obligations — shifting from reactive content moderation to proactive identity verification as a baseline platform requirement.
Comparative Global Models — Australia's Social Media Age Law
Australia enacted the Online Safety Amendment (Social Media Minimum Age) Act in late 2024, establishing 16 as the minimum age for social media access — one of the world's strictest age-gating laws. The law requires platforms to take "reasonable steps" to prevent under-16s from creating accounts, with fines of up to AUD 49.5 million for systemic non-compliance.
- Australia is the first country to legislate a hard minimum age floor (16) for social media.
- The UK's Online Safety Act 2023 mandates age-appropriate design and parental controls but does not set a blanket age floor.
- The EU's Digital Services Act (DSA) prohibits targeted advertising to minors but relies on risk assessments.
- India's three-tier graded approach (under-12, 12–16, 16–18) mirrors internal EU discussions on differentiated obligations.
Connection to this news: India's deliberations are informed by global legislative experimentation. The parliamentary committee's recommendations signal that India may legislate an age-gating regime similar to or more comprehensive than Australia's, with specific frameworks for three age bands rather than a single cutoff.
Key Facts & Data
- India had approximately 600 million social media users in 2025, of which an estimated 23% are under 18.
- The parliamentary committee's report was submitted to the Ministry of Home Affairs and Ministry of Information and Broadcasting.
- KYC (Know Your Customer) verification uses government-issued identity documents (Aadhaar, PAN, voter ID) to verify identity.
- Karnataka's 2026-27 Budget announcement on social media ban for under-16s was a first for any Indian state.
- The Digital Personal Data Protection Act, 2023 was passed by Parliament in August 2023 and notified in September 2023.
- DPDP Rules, 2025 were notified in November 2025, making the child data protection provisions fully operational.