NHRC Probe Exposes Gaps in India’s Online Child Protection

NHRC Initiates Probe into Instagram Advertisements

NHRC Probe Exposes Gaps in India’s Online Child Protection: The National Human Rights Commission (NHRC) has issued notices to the Ministry of Electronics and Information Technology (MeitY), Ministry of Information and Broadcasting (MIB) and Delhi Police over paid Instagram advertisements allegedly directing users towards Telegram channels containing Child Sexual Abuse Material (CSAM).

The Commission has sought an Action Taken Report within two weeks. The advertisements reportedly passed Meta’s content-review mechanisms and remained available until the issue was specifically brought to the platform’s attention.

The case has raised broader concerns regarding platform accountability, mandatory reporting and India’s capacity to respond to online child abuse alerts.

NHRC Raises Questions Under the POCSO Act

The Commission has focused on whether statutory reporting requirements under the Protection of Children from Sexual Offences (POCSO) Act, 2012 were properly followed.

Under Section 19 of the POCSO Act, a person who apprehends that an offence is likely to occur or has knowledge that an offence has occurred is required to report the matter to the Special Juvenile Police Unit or local police.

The NHRC has asked Meta whether the alleged offences were reported to the appropriate authorities and, if not, who was responsible for ensuring compliance.

Static GK fact: The POCSO Act, 2012 is India’s principal legislation specifically dealing with sexual offences against children and provides child-sensitive procedures for reporting, investigation and trial.

Are AI-Driven Platforms Still Intermediaries?

Another important issue concerns the legal status of technology platforms that increasingly use artificial intelligence to influence content and user activity.

A representation before the NHRC argued that Meta’s systems perform functions beyond simply hosting third-party material. These include generating captions, recommending posting schedules, optimising engagement and supporting monetisation.

The NHRC has described this as a significant regulatory question and asked the Ministry of Information and Broadcasting to examine whether such activities remain compatible with the concept of an intermediary under India’s information-technology framework.

The underlying question is whether platforms that actively generate, curate, recommend, amplify or monetise content should receive the same legal treatment as entities that merely host third-party material.

CyberTipline Reports and India’s Response

India received approximately 1.9 million CyberTipline reports in 2025. These reports originate when technology companies identify suspected child sexual exploitation and abuse material (CSEAM) and report it to the National Center for Missing & Exploited Children (NCMEC) in the United States.

Reports connected with India are subsequently made available to Indian authorities. The National Crime Records Bureau (NCRB) and Indian Cybercrime Coordination Centre (I4C), under the Ministry of Home Affairs, process the information before it is assigned to relevant state and district authorities.

In Delhi, the Intelligence Fusion and Strategic Operations (IFSO) unit receives such reports, verifies jurisdiction and forwards them to the appropriate police station.

These alerts can involve suspected abuse material, attempts to circulate such content, online grooming, sextortion, trafficking-related material and accounts suspected of storing CSAM.

From CyberTipline Alert to FIR

A CyberTipline report does not automatically result in an FIR. Police generally undertake preliminary verification to establish the relevant account, jurisdiction and nature of the suspected material.

Investigators may examine IP addresses, subscriber information, email addresses, phone numbers, account-creation records and digital hash values. A hash functions as a digital fingerprint, allowing investigators to determine whether material recovered during an investigation corresponds with material identified in an earlier report.

The quality of reports can vary considerably. An FIR may be registered when the available material prima facie indicates an offence, but establishing the age of individuals depicted can sometimes become difficult, particularly when images are unclear or heavily blurred.

Static GK Tip: NCRB functions under the Ministry of Home Affairs and compiles and analyses crime-related data in India.

Cybercrime Data Shows the Scale of the Problem

The Crime in India 2024 data cited in the report illustrates the scale of sexually explicit online material involving children. Among 1,238 cybercrime cases registered against children under the IT Act, 1,099 cases involved publishing or transmitting sexually explicit material depicting children.

This represents nearly nine out of every ten cases in that category, demonstrating the importance of effective digital investigation and child-protection mechanisms.

Investigation, Digital Evidence and Trial

Once an FIR is registered, investigators attempt to identify the person operating the relevant account. This can involve obtaining subscriber information, tracing IP addresses, identifying internet service providers and conducting forensic examination of electronic devices.

The integrity of digital evidence is maintained through appropriate documentation, including certificates under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023.

Cases involving relevant offences can be tried before POCSO Special Courts. Under Section 28(3) of the POCSO Act, such courts have jurisdiction over specified offences under Section 67B of the Information Technology Act.

Static GK fact: Section 67B of the IT Act deals with material depicting children in sexually explicit or related prohibited contexts.

Structural Challenges in Online Child Abuse Investigations

One major difficulty is that a CyberTipline report generally indicates where suspected material was detected, rather than conclusively establishing where it originated. Determining the source requires additional investigation.

The involvement of several agencies can also lengthen the process before information reaches the police station with jurisdiction over the matter.

Technology is creating additional challenges. Encrypted communication platforms and AI-generated material can complicate conventional detection techniques, including systems based on known digital hashes.

Therefore, law-enforcement capacity building cannot be treated as a one-time exercise. Investigative agencies must continuously update their technological capabilities, forensic expertise and coordination mechanisms as online abuse methods evolve.

Way Forward

The NHRC proceedings highlight the need for a stronger and faster institutional response. Mandatory reporting requirements under the POCSO Act must be clearly enforced, while the regulatory framework should address the growing role of AI-driven platforms in content recommendation and monetisation.

Improved coordination among platforms, NCMEC, NCRB, I4C, state police and specialised investigation units can reduce delays. Continuous investment in digital forensics, cyber-investigation skills, platform accountability and child-safety mechanisms is equally important.

Conclusion

The NHRC probe into Instagram advertisements has brought attention to two interconnected challenges: effective enforcement of mandatory child-abuse reporting obligations and the evolving legal responsibilities of AI-driven digital platforms.

The large number of online abuse alerts does not automatically translate into investigations and prosecutions. Closing this gap requires faster reporting, clearer platform responsibilities, stronger inter-agency coordination and continuous technological capacity building to ensure effective protection of children in the digital environment.

Static Usthadian Current Affairs Table

NHRC Probe Exposes Gaps in India’s Online Child Protection: