On 15 October 2026, the Supreme Court of India held that children share the fundamental right to access and use the internet. The same order (2026 INSC 1149) rejected blanket age bans and listed sixteen measures to keep children safe, addressed to governments, child-rights commissions, online platforms and educational institutions.
For schools, the list is specific: teach digital safety and consent from the primary stage, display helplines in every classroom, filter school devices and networks, train staff, and run regular programmes for parents. The Court says these measures "must be undertaken". The order sets no deadline for schools and names no penalty for them. The Union government has to report on progress by the next hearing, listed for 10 December 2026.
This explainer sets out what the Court decided, what it asks of schools, how firm those asks are, and what school leaders can do this term.
What Did the Supreme Court Decide?
The Court decided that internet access is a fundamental right of every person, children included, and that their safety has to be secured without taking that right away. Para 292 holds that "the right to access and use the internet is a fundamental right of every individual under Article 21 read with Article 19(1)(a) of the Constitution. Our children, irrespective of their age enjoy the same rights". It adds: "The safety of our children and their freedom are not at odds with each other. Our children are entitled to both."
Justices J.B. Pardiwala and K.V. Chandran passed the order in Just Rights for Children Alliance v. S. Harish (M.A. Nos. 2553-2554 of 2026). This is the case in which the Court ruled on child sexual exploitation and abuse material (CSEAM) in September 2024. An order of 14 August 2026 had "expressed concerns over certain serious lapses" by social media platforms in following that judgment. On the right itself, the Court built on Anuradha Bhasin v. Union of India (2020), on internet shutdowns, and Pragya Prasun v. Union of India (2025), on digital access.
Official data shows why the case matters to schools. The National Crime Records Bureau recorded 1,902 cybercrimes against children in 2023, of which 1,499 were cases of cyber pornography or publishing obscene sexual material depicting children [1].
Why Did the Court Reject Blanket Age Bans?
The Court rejected blanket bans because they aim at the wrong target and have not been shown to work. Para 284 says any safety measure "must be directed at the harmful material and those responsible for the same, and not at the children themselves". Keeping a child off the internet, para 285 adds, "would be to mistake the victim for the problem".
It gave three practical reasons. Age checks require "identifying and ascertaining the age of each and every user, continuous collection and monitoring of sensitive data" (para 286). Children who are banned keep using the internet without adults knowing, and move to platforms that are "unregulated and even more unsafe" (para 294). A child being threatened online also becomes less willing to tell a parent, "out of fear of reprisal for using the internet" (para 295). Para 297 sums up blanket restrictions as "unproven measures of proven disproportionality".
Access also matters for learning. For many children, para 288 says, the internet "is often the only source of learning and information". Connectivity in school remains uneven: 67.4% of Indian schools had internet in 2025-26 [2].
The order keeps some age-based safeguards. Para 300 suggests "parental consent, guidance and oversight" and a dedicated "child mode". Para 301 lists accounts that are private by default, limits on contact from unknown adults, and moderated advertising and content, and leaves the details to the Union government. Para 302 says the Union can still restrict "specific categories of content or services that are inherently harmful", such as adult content websites.
What Does the Order Ask Schools to Do?
The order asks schools to teach, display, filter, train and reach out to parents. Items (i) to (xii) of para 315 are the ones that reach schools. Items (viii) to (xi) name schools or their staff directly. The others describe what children and parents should learn, and the curriculum item gives the development work to NCERT and the SCERTs.
| Measure | What it means in practice | Para |
|---|---|---|
| Teach consent and respect | From the primary stage, age-appropriate teaching on their bodies, safe and unsafe touch and consent, plus healthy relationships and respect for peers | 315(i)-(ii) |
| Teach safe internet use | Protecting personal data and privacy, and recognising enticement, sexual extortion and similar abuse | 315(iii) |
| Give children someone to tell | A trusted adult at home and in school, known reporting channels, and an assurance of no reproach and complete confidentiality | 315(iv)-(v) |
| Explain the law | The POCSO Act and IT Act provisions on CSEAM, and children's rights under them | 315(vi) |
| Put it in the curriculum | Digital safety and age-appropriate sex education in the core curriculum, developed by NCERT and the SCERTs, in text, pictorial and audio-visual formats | 315(vii) |
| Display helplines | Child Helpline 1098, Cyber Crime Helpline 1930, the National Cyber Crime Reporting Portal and State-wise nodal officers, in every classroom, hostel, library and computer laboratory, and on the school website | 315(viii) |
| Filter devices and networks | Filters on devices and networks on school premises, with "greater rigour" in hostels, child care institutions, and tuition and coaching centres | 315(ix) |
| Train staff | Signs of grooming, abuse and online harassment, how to respond to a disclosure, the duty to report under Sections 19 and 21 of the POCSO Act, and confidentiality; non-teaching staff sensitised too | 315(x) |
| Run parent programmes | Sessions "at regular intervals" on online risks, parental controls and safety settings, signs of distress and how to respond, and on monitoring without creating mistrust | 315(xi)-(xii) |
The filter item carries its own limit: filters are to work "in a reasonable and proportionate manner". Para 312 ties the teaching together, calling digital safety and sex education "two sides of the same coin". For CBSE schools, any new content would add to the computational thinking and AI curriculum for Classes 3 to 8 and to wider work on AI literacy.
What Must Platforms and the Government Do?
Platforms and the Union government carry the firmest duties in the order, set out in para 316. These are stated as directions:
- The Union government must create a National Hash & URL List Database, used only to detect and remove CSEAM, with each entry confirmed by "at least three trained human analysts".
- Platforms must immediately remove anything that matches the database, and show a notice in place of removed material.
- Platforms must report newly found CSEAM to the proper authority, such as the police or the cybercrime portal, within two hours of removing it or of resolving the complaint.
- Platforms must show grievance officer details on the home page or screen, and offer a clearly labelled CSEAM reporting category within two steps of the content.
- Platforms must acknowledge each report within twenty-four hours with a reference number, and publish monthly compliance reports with a separate CSEAM section, independently audited.
Other items go to the Union to decide. It "shall further consider" a framework of exemplary fines on platforms, and para 316 expects it to amend the IT Rules so that complaint-tracking duties cover every platform. Para 315 also says the Union and State governments shall run sustained POCSO awareness campaigns and provide free counselling and therapy for victims "for as long as may be necessary".
How Does It Fit With POCSO, the IT Rules and the DPDP Act?
The order sits on top of existing law, and the POCSO reporting duty is the part school staff already carry. Under Section 19 of the POCSO Act, any person who knows of an offence, or fears one is likely, must report it to the Special Juvenile Police Unit or the local police. Section 21 makes failure to report punishable. Para 315(x) says staff training must cover this.
On the IT Rules, para 318 tells the Union to formulate guidelines, standard operating procedures and amendments to the IT Act and IT Rules "where necessary". The existing Rule 3(2)(b), which gives a platform two hours to act on a complaint from the person depicted, is a different rule from the new two-hour reporting timeline.
The DPDP Act, 2023 and the DPDP Rules, 2025 separately require verifiable parental consent for processing a child's personal data. Para 301 speaks of "a reasonable and proportionate means to verify parental consent" for pre-teens on social media, and leaves the details to the Union.
Is This Binding on Schools, and What Happens Next?
The Court's wording to schools is firm, and its enforcement route runs through the Union government. Para 315 says the measures "must be undertaken" by a list of bodies that includes educational institutions. Para 317 then directs the Union, through the Ministry of Electronics and Information Technology and the Ministry of Law and Justice, to oversee and implement "the suggestions, measures and safeguards" in the judgment.
The order gives schools no deadline and sets no penalty for them. Para 318's guidelines and standard operating procedures may bring formal instructions to schools. At the time of writing, we found no circular from CBSE, UGC or MeitY acting on these measures. The curriculum also has to be built: para 315(vii) leaves it to NCERT and the SCERTs, working with child psychologists, educators and parenting experts. Para 311 asks what the Union has done in the two years since the Court's 2024 suggestions, which include sex education and awareness.
The Union must file an affidavit on progress by the next hearing, and the case is listed for 10 December 2026 (paras 319-320). A separate petition is also before the Court. LiveLaw reported that a bench led by Chief Justice Surya Kant issued notice on 10 September 2026 in W.P.(C) No. 1120/2026, which asks that minors be unable to contract with social media platforms without a parent's or guardian's consent.
A Checklist for School Leaders This Term
These steps come straight from para 315 and can start before any circular arrives.
- Display 1098, 1930, the National Cyber Crime Reporting Portal and your State's nodal officer details in every classroom, hostel, library and computer laboratory, and on the school website.
- Review the filters on school devices and networks, including hostels, and check that they work in a reasonable and proportionate manner.
- Train teachers and other staff on signs of grooming, abuse and online harassment, responding to a disclosure, POCSO reporting and confidentiality. Sensitise non-teaching staff as well.
- Name the trusted adults in school, publish the reporting channels, and tell students that speaking up will never be met with reproach.
- Schedule parent sessions at regular intervals on online risks, parental controls and safety settings, signs of distress and how to respond.
- Compare what you teach now, stage by stage, with items (i) to (vi), starting at the primary stage.
This explainer summarises a court order for general information and is not legal advice.
Frequently Asked Questions
Is internet access now a fundamental right for children in India?
Yes. Para 292 of the order holds that the right to access and use the internet is a fundamental right of every individual under Article 21 read with Article 19(1)(a), and that children enjoy the same rights irrespective of age. The Union can still restrict content or services that are inherently harmful to children, such as adult content websites (para 302).
Does the ruling ban social media for children under a certain age?
No. The Court rejected blanket restrictions as "unproven measures of proven disproportionality" (para 297). It favours parental consent and oversight with a dedicated "child mode", and leaves the details to the Union government (paras 300-301).
What does the order ask schools to do?
Para 315 says helplines 1098 and 1930 and the National Cyber Crime Reporting Portal must be displayed in classrooms, hostels, libraries, computer laboratories and on the school website. It also asks for filters on school devices and networks, trained staff, regular parent programmes, and digital safety teaching from the primary stage.
Is there a deadline for schools?
No. The order sets no deadline for schools. It directs the Union government to oversee implementation (para 317) and to report on progress by the hearing listed for 10 December 2026 (paras 319-320).
Will sex education become part of the school curriculum?
The Court says digital safety and age-appropriate sex education "must form a part of the core curriculum", developed by NCERT and the SCERTs with child psychologists, educators and parenting experts (para 315(vii)). That curriculum has yet to be developed.
What is CSEAM?
CSEAM stands for child sexual exploitation and abuse material. It is the term the Supreme Court uses in this order and in its 2024 judgment in the same case.
What happens on 10 December 2026?
The case is listed for that date. Before it, the Union government must file an affidavit showing the progress made and the steps taken to comply (paras 319-320).
References
[1] Crime in India 2023, Vol. II, Table 9A.11, Cyber Crimes against Children (State/UT-wise) - 2023: https://www.ncrb.mha.gov.in/uploads/files/2CrimeinIndia2023PartII2.pdf
[2] The Union Ministry of Education Releases the Report on UDISE+ 2025-26: https://www.pib.gov.in/PressReleasePage.aspx?PRID=2282141
