NHRC Raises Alarm Over Digital Data Protection for Children: What You Need to Know

NHRC Takes Action on Digital Data Protection Violations

New Delhi: The National Human Rights Commission (NHRC) has acknowledged reports of potential breaches of the Digital Personal Data Protection (DPDP) Act, particularly highlighting the lack of systems to monitor data transfers involving children and insufficient grievance mechanisms on major digital platforms.

A bench led by NHRC member Priyank Kanoongo has commenced proceedings following a complaint linked to a report from the think tank ASIA.

The Commission has dispatched notices to several key government departments, including the Union Ministry of Electronics and Information Technology (MeitY), the Ministry of Education, and the Ministry of Communications, with copies also sent to the Ministry of Home Affairs.

The NHRC has requested clarification from the Ministry of Communications regarding the protocols for issuing SIM cards to minors for internet and mobile access. Officials have pointed out the absence of clear guidelines for registering SIM cards under the names of children in India, raising concerns about regulatory shortcomings.

The DPDP Act, which was enacted in 2023 and implemented through rules announced in late 2025, is seen as a crucial advancement in India's data protection landscape. This legislation aims to protect vulnerable populations, including children, women, and the elderly, from potential cyber threats and the misuse of personal information.

While some provisions, such as obtaining verifiable parental consent, have been granted an 18-month period for compliance, several critical requirements, including data tracking systems, server security, and effective grievance redressal mechanisms, are required to be implemented immediately.

The report indicates that several prominent platforms, including Meta Platforms, Khan Academy, WhatsApp, Grok, Gemini, Perplexity AI, and Microsoft Math Solver, have yet to fully adhere to these regulations.

The Commission has expressed grave concerns, stating that these oversights could significantly endanger children's digital safety. It has instructed all relevant parties to provide comprehensive compliance reports within 15 days.

The NHRC, an independent statutory body responsible for safeguarding human rights in India, possesses powers akin to those of a civil court, and its members hold a status comparable to that of a Supreme Court judge.

The Commission has also suggested that similar measures may be taken in the future to protect other vulnerable groups, including senior citizens.