Why in the News
In its order of 15 October 2026, a bench of Justice J.B. Pardiwala and Justice K.V. Chandran of the Supreme Court laid down a broad framework for the online removal of child sexual exploitation and abuse material (CSEAM): a national hash and URL list database by the Centre, reporting and grievance-redress timelines for intermediaries, consideration of exemplary penalties and the forfeiture of paywall earnings, and the inclusion of digital safety and age-appropriate sex education in the core curriculum. The order also said that access to the internet is the fundamental right of every person under Article 19(1)(a) along with Article 21, and children are included in it. The order's text surfaced on 17 October and reports were published from the same day. The next hearing is on 10 December 2026.
This article is written from the order's official text (on the Court's website), but of the full 136 pages we have read the summary section (the directions at number 316), the Article 21 section, the education section and the introduction; not the full reasoning of the analysis sections in between. Several directions ask the Centre to "consider" or frame guidelines; they are not yet ready rules.
The Judicial Development of the Right of Digital Access
Anuradha Bhasin v. Union of India (2020): the freedom to express and to trade through the internet received the protection of Articles 19(1)(a) and 19(1)(g) respectively. But that judgment did not give a final view on the question of treating access to the internet as a separate fundamental right in itself.
Pragya Prasun v. Union of India (2025 INSC 599): the exclusion of persons with disabilities from digital KYC was held contrary to Article 21. Digital access is part of the right to life and dignity; making digital services accessible for vulnerable and deprived groups too is the State's responsibility.
The order of 15 October 2026: in its paragraphs 289-292, the Court explained these two judgments and called access to the internet and its use a fundamental right under Article 19(1)(a) along with Article 21. Children too have this right. So the answer to safety is not taking away their digital freedom entirely, but building a safe and age-appropriate environment. Do not treat these three judgments as saying the same thing: the constitutional reasoning has developed in stages.
Background and Context
Children's online safety has two easy but incomplete answers: keep children away from the internet, or put the whole burden on technology. This order's core reasoning is that safety's three parts run together: the technical accountability of platforms and the State, the child's right, and the awareness of the child and the adults around them. This is useful for the exam because Articles 21 and 19(1)(a), intermediary liability, POCSO and education policy come together in one narrative.
27 October: The Discussion of a Proposed Law
On 27 October 2026, in the hearing of Prajwala's petition, the Centre said it is considering a statutory framework to deal with child sexual abuse material and adults' intimate material disseminated without consent. Per the hearing's report, the possible provisions could include informing authorities along with intermediaries' takedown of material, and accepting a third party's good-faith complaint besides the victim's. Taking suggestions from stakeholders was also mentioned.
This is still a proposal: do not take it as an enacted law, a rule in force, or a final judicial direction of 27 October. The proposal's final text, scope and timeline are not established from this report. This is the separate context of the Prajwala hearing; the 15 October order explained below is in the case Just Rights for Children Alliance v. S. Harish. The two proceedings should not be read as one order.
Why the distinction is necessary: the protection of victims is a shared concern in child sexual abuse material and adults' intimate material shared without consent, but the legal categories are not alike. The 15 October order's hash-URL database is limited only to CSEAM; on the basis of the new discussion, its scope cannot be presumed to have extended automatically to adult material.
The Key Concept: Three Layers of Safety and "Not Treating the Victim as the Problem"
Layer 1, technology: with a hash (a digital identification imprint) and a URL list, material identified on one platform can be identified on other platforms too. Hence a shared database, but with stringent verification: the final decision of three trained human analysts, so that lawful material is not added by mistake. The database is only for CSEAM; in para 303 the Court clearly said it must not be turned to any other purpose.
Layer 2, accountability: the intermediary must display the complaint facility prominently, keep a separate category, give an acknowledgement within 24 hours and report to the police within the fixed time. Along with this, there is also a route of complaint against takedown, so that over-removal has a remedy.
Layer 3, education and support: in the Court's words, digital safety and sex education are "two sides of the same coin". The child needs to recognise an inappropriate request, to know whom to tell, and the confidence that telling will not bring a scolding.
The test: paras 284-285: safety measures should target the harmful material and those responsible for it, not children. In CSEAM, the offender is the one who makes, spreads, sells or seeks the material, and the intermediary that fails to identify and remove it; keeping children away would be "treating the victim as the problem". But the order does not wholly reject age-based safety measures: parental consent and supervision, child mode and blocking inherently harmful material are valid routes (paras 299-302).
Key Facts and Figures
The numbers in parentheses are the order's paras or summary numbers (316). Words in quotation marks are English words from the order.
| Detail | Description |
|---|---|
| The order (original text read) | Supreme Court, M.A. Nos. 2553-2554 of 2026 (in Criminal Appeal Nos. 2161-2162 of 2024), Just Rights for Children Alliance & Anr. v. S. Harish & Ors., 2026 INSC 1149, "REPORTABLE". Bench: Justice J.B. Pardiwala and Justice K.V. Chandran. Date on the order: "New Delhi, October 15, 2026"; the date of the digital signature on the PDF is 17 October 2026. Per the order's pagination, 136 pages. |
| Background (per the order, paras 2-5) | In its earlier order of 14.08.2026, the Court had expressed concern over the failures of social media intermediaries in complying with the directions of the judgment of 23.09.2024 (2024 INSC 716). In that judgment, per the order, the algorithmic spread of indirect links to child sexual exploitation and abuse material (CSEAM) had been raised; the order mentions Section 15 of the POCSO Act and Section 67B of the IT Act. We have not read the text of these sections separately. |
| National hash and URL database (numbers 2A-2I) | Per the order, the Centre "shall create" a national hash and URL list database, whose purpose is only the identification and removal of CSEAM; it can be part of the Sahyog Portal or a separate repository. Entry only after multi-level checking; special software can do the initial sorting, but the final decision will be made independently by at least three trained human analysts. Entries through an encrypted medium and limited only to hash/URL. "Known Origin" material (matching the database) must be removed by the intermediary immediately, without waiting for further verification. For "unknown-origin" material, due verification and caution per the IT Rules is necessary before removal. |
| Notice and complaint in place of removed material (3, 4) | Every time material is removed as CSEAM, a notice must be prominently displayed stating whether the removal was from the intermediary's own identification or from a database match. A complaint against removal on its own identification goes through Rule 3(2) of the IT Rules and 3A (Grievance Appellate Committee); a complaint against removal on a database match goes to the authority running the database, for which the Centre has to frame guidelines. |
| Reporting and timelines (5, 6) | Per the order, reporting is per Rule 11 of the POCSO Rules, that is, to the Special Juvenile Police Unit, local police and/or the cyber-crime portal. Unknown-origin material: if removed on complaint, immediately after disposal and in any case within two hours of disposal (6A); if removed on its own checking, within two hours of removal (6B); if removed on a court order or a reasoned notice of the appropriate government, within two hours of removal (6C). For known-origin material, no two-hour rule; a weekly consolidated report to the database authority (5D, 6D). The report of unknown-origin material also goes to the database authority (5C). |
| Grievance system (7, 8, 9) | The grievance officer's details on the website/app's homepage, per Rule 3(2)(a) (7A); a separate, clear category for CSEAM, reachable within two steps from the related material and uniform across all intermediaries (8A-8C, a "request" to the Centre for guidelines for this uniformity). No CSEAM complaint will be disposed of without review by a trained grievance officer; automated tools only assist in initial sorting (9F); conclusions recorded, with a digital signature (9G); acknowledgement and reference number within 24 hours, and the decision communicated with reasons (9H); a monthly compliance report, a separate section on CSEAM complaints, and periodic independent audit by an officer nominated by MeitY (9K, 9L). Rule 4(6) applies only to significant social media intermediaries; the Court "expects" the Centre to extend it to every intermediary for CSEAM complaints through amendment of the IT Rules (9I, 9J). |
| Penalty and paywall (10) | Penalty: the Centre "shall further consider" a framework of exemplary monetary penalties; the amount considering gravity, duration, repetition, and the intermediary's size and turnover (10A, 10B). For earnings from paywall/subscription, the order says that revenue "should be forfeited and disgorged" (10C); a "strict notice" to all intermediaries on rigorous checking of paywall/subscription-based material (10D); obscene or sexually explicit material must not reach children (10F); the Centre will frame guidelines for checking paywall material (10G). The order also has a section titled "need to think beyond Section 79"; we have not taken its full reasoning in this article. |
| Children's internet right (paras 281-303) | Para 292: the right to access and use the internet is the fundamental right of "every individual" under Article 19(1)(a) along with Article 21, children too regardless of age. Bases cited in the order: Anuradha Bhasin (2020) 3 SCC 637 (where the Court had left open the question of internet access being a fundamental right in itself, para 290) and Pragya Prasun v. Union of India, 2025 INSC 599 (digital access part of Article 21). Para 286: age-based restrictions demand verifying every user's age and continuous monitoring of sensitive data, which does not fit with the right of privacy. Para 297: a direct ban is among "unproven measures of proven disproportionality". Still, paras 299-302: age-based safety measures are possible, such as parental consent and supervision, accounts private by default, blocking contact from unknown adults, advertising regulation, and due verification of consent for pre-adolescents; the details are left to the Centre. A bar on inherently harmful categories such as adult material is not forbidden (302). Para 303: the hash/URL framework only for CSEAM, for no other purpose. |
| Education and support (paras 304-315) | Para 311: after more than two years had passed since the 2024 suggestions, the Court asks the Centre what steps it took. Para 312: digital safety and sex education are "two sides of the same coin". Para 315's sixteen measures (all in "must" or "shall" language) for the Centre, states, child rights commissions, educational institutions and intermediaries: from the primary level, education about the body, safe/unsafe touch and consent; healthy relationships; safe internet; whom and how to tell; the assurance of telling without fear; the importance of POCSO and the IT Act; a core curriculum by NCERT and SCERT in consultation with child psychologists, teachers and parent experts; display of 1098, 1930 and the National Cyber Crime Portal in classrooms, hostels, libraries, computer labs and school websites; "appropriate and proportionate" filters on institutions' devices and networks (more stringency in hostels, child-care institutions, tuition and coaching centres); teacher training (in which the order mentions the reporting obligation under Sections 19 and 21 of the POCSO Act); regular programmes for parents; continuous awareness campaigns; periodic reminders to children by intermediaries, warning signs on contact from an unknown adult, and warnings on search terms related to CSEAM; free counselling, psychological support and follow-up for victims for the necessary period. |
| Further directions for the Centre (317-320) | The Centre will prepare guidelines, SOPs and amendments "when necessary" in the IT Act and Rules through MeitY and the Law Ministry; it will give an affidavit of progress by the next hearing; the case is listed for 10.12.2026 (para 320). |
Analysis: Three Questions That Should Be Asked of Such an Order
(This is our analysis, not part of the order.)
1. Is the framework implementable? The database, SOPs and changes in the IT Rules are the Centre's work, and the penalty framework is only at the "consider" level. The real test will come in the form of the 10 December affidavit and then rules.
2. Is there protection from over-removal and wrong entries? The three analysts, encrypted entries, audits and two separate complaint routes are answers to this concern. Still, the risk of haste over timelines such as two hours remains an open question.
3. Will the gap in education be filled? The curriculum, teacher training and parent programmes have to be implemented at the level of states and institutions; the Court itself has asked what the Centre did on the 2024 suggestions. Resources, language and rural reach will remain difficult.
Importance: Not Treating Rights and Safety as Opposites
Para 292's statement: "The safety of our children and their freedom are not opposed to each other. Our children are entitled to both." This is a formulation useful in both essays and ethics. Along with this, the order treats children as holders of rights and points the direction of balancing privacy, dignity and access to information with safety.
Challenges and What Was Not Read
- We have not read the full reasoning of the order's analysis sections in between (the technical background of hash-matching, India's position, the discussion on Section 79 and penalties). The original texts of the POCSO Act (Sections 15, 19, 21, 43, 44), Rule 11 of the POCSO Rules, 2020, Sections 67B and 79 of the IT Act, and Rules 3, 3A and 4(6) of the IT Rules we have not read separately; everything about them is only what the order itself says.
- We have not read the 2024 judgment (2024 INSC 716) directly; its parts are only those quoted in the 2026 order.
- The penalty amount, the date of coming into force and the draft of the amended IT Rules have not yet come. We did not get the Centre's or platforms' response.
- We saw no figure in the order on monitoring of compliance with the directions, platforms' capacity and implementation in schools.
Way Forward
- Time-bound guidelines and SOPs, with public consultation on drafts.
- Independent audit and transparency reports for the database, so that both the victim's privacy and lawful material are protected.
- Building of NCERT and SCERT curricula in regional languages and audio-visual forms, along with teacher training.
- Victim-centred support: counselling, follow-up and privacy.
Distinction in Concepts
| Point | Difference |
|---|---|
| "shall/must" versus "consider/should/could" | The order's language changes. Creating the database, affidavits, guidelines and SOPs are "shall" for the Centre; several obligations for intermediaries are "must", but their descent into rules rests on the Centre's amendments (9J, 1C, 318); the penalty framework is "consider"; an arrangement like child mode is a suggestion as "could be". This classification is our reading. |
| Unknown-origin versus known-origin | Known-origin (database match): remove immediately, no waiting for further verification, weekly consolidated report. Unknown-origin: first due verification, then removal, and a two-hour reporting timeline. The two procedures are different. |
| Hash versus URL | A hash (perceptual hash in the order) is material's identification imprint; the URL list marks those addresses. The database will have entries only of these, not of the material. |
| Database complaint versus intermediary complaint | Against removal on its own identification: complaint under the IT Rules and then the Grievance Appellate Committee. Against removal on a database match: the authority running the database. |
| Full ban versus proportionate safety | The order treats a direct ban that keeps children completely away from the internet as disproportionate, but keeps open measures such as parental consent and supervision, child mode, and a bar on inherently harmful categories. |
Read a separate context of digital platforms' accountability: Online child safety: accountability along with advertising earnings. This is an event of advertising and child rights, not a substitute for the 15 October judicial order or the 27 October hearing.
Mains Perspective
GS-II: child rights, the judiciary's role, education, government policies and interventions; GS-III: cyber security, regulation of digital platforms; GS-IV: moral duty towards children, dignity and protection versus freedom.
Mains Practice Question
"Children's safety and their freedom are not opposed to each other." Examine this statement in the context of the Supreme Court's October 2026 directions against child sexual abuse material, and state how platforms' accountability and the role of education join in it.
(Answer in 150 words) | 10 marks
Answer Outline
In the introduction: the 15 October 2026 order and children's internet access in 19(1)(a) along with Article 21 (para 292).
In the main body: three layers: the shared hash and URL database (three human analysts), intermediaries' reporting (two hours for unknown-origin) and the 24-hour acknowledgement, digital safety and sex education in the core curriculum; proportionate measures (consent, supervision, child mode) versus a full ban; challenges: the risk of over-removal, directions versus rules, implementation.
In the conclusion: give a balanced conclusion.
Sources
- The 27 October Prajwala hearing and the Centre's proposal: news report (this is not a source of the proposal's final legislative text or a written order)
- The order's official text: M.A. Nos. 2553-2554 of 2026, Supreme Court, 15 October 2026 (2026 INSC 1149)
- News report, for comparison: Bar & Bench, 17 October 2026
- News report, for comparison: LiveLaw, 17 October 2026
- News report, for comparison: Verdictum, 18 October 2026
Note: the main source is the Supreme Court's order. The order's summary, Article 21 and education sections were read; the full reasoning of the analysis sections in between and the original texts of the laws and rules listed above were not read separately. The classification comments in "Analysis" and "Distinction in Concepts" are ours. This is a separate event from the 16 October NHRC-Instagram advertising report.
Download This Article: PDF
