Why is NCPCR investigating Meta, Instagram?

Polity & Governance · 23 September 2026 · Based on The Hindu (original report)

2-minute summary

The National Commission for Protection of Child Rights (NCPCR) has summoned Meta executives over the proliferation of Child Sexual Exploitation and Abuse Material (CSEAM) advertisements on Instagram. This action follows investigations by the BBC and the Tech Transparency Project (TTP), which revealed that Meta's automated moderation systems failed to block ads promoting CSEAM, some of which targeted Indian users. The reports highlighted systemic loopholes, including relaxed enforcement for third-party ad resellers (particularly based in China) and the misclassification of child abuse content as general adult content. Alongside the NCPCR, the Ministry of Electronics and Information Technology (MeitY) has also sought explanations from Meta. The case underscores the regulatory challenges in governing global social media intermediaries and highlights the statutory powers of the NCPCR under the Commissions for Protection of Child Rights (CPCR) Act, 2005, to summon corporations and investigate child rights violations.

Why it's in the news

The NCPCR has initiated an inquiry and summoned Meta officials following investigative reports exposing advertisements promoting Child Sexual Exploitation and Abuse Material (CSEAM) on Instagram, raising critical questions about intermediary liability and online child safety.

Facts to remember

The National Commission for Protection of Child Rights (NCPCR) summoned Meta executives over the proliferation of Child Sexual Exploitation and Abuse Material advertisements on Instagram.
The NCPCR is a statutory body established in 2007 under the Commissions for Protection of Child Rights Act, 2005.
Investigative reports by the BBC and the Tech Transparency Project revealed that Meta's automated moderation systems failed to block ads promoting CSEAM.
India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 mandate social media intermediaries to exercise due diligence regarding child safety.

Background and context

Online child safety has emerged as a critical global and national concern with the rapid expansion of social media platforms. Under India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, social media intermediaries are mandated to exercise due diligence, including the proactive detection and removal of Child Sexual Abuse Material (CSAM). Despite these regulations, automated content moderation systems powered by AI often fail to detect sophisticated workarounds used by bad actors. The recent controversy involving Meta highlights structural gaps where commercial ad-revenue models, such as third-party ad resellers, bypass safety checks. Historically, the Protection of Children from Sexual Offences (POCSO) Act, 2012, and the Indian Penal Code (now Bharatiya Nyaya Sanhita) criminalize the creation, storage, and distribution of CSAM. The NCPCR, established as a statutory body in 2007, plays a pivotal role in monitoring the implementation of these laws, possessing civil court powers to summon entities and requisition documents to ensure child protection.

Constitutional provisions

Article 21 — Protection of life and personal liberty, which the Supreme Court has interpreted to encompass the right to a safe environment and protection from exploitation, especially for children.
Article 39(f) — Directive Principle of State Policy directing the State to ensure that children are given opportunities and facilities to develop in a healthy manner and are protected against exploitation.

Committees and reports

Tech Transparency Project (TTP) Report on CSAM Ads — Exposed systemic failures in Meta's advertising systems that allowed CSAM ads to bypass moderation and target users, including in India.

Government schemes

Protection of Children from Sexual Offences (POCSO) Act — Provides a robust legal framework to safeguard children from sexual abuse, consumption, and distribution of child pornography.
Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules — Mandates social media intermediaries to proactively identify and remove CSAM or face loss of safe harbour protection.

International organisations

UNICEF (United Nations Children's Fund) — Advocates globally for online child safety and works with governments to establish frameworks preventing online child exploitation.

Previous UPSC questions on this theme

Mains GS-3 2022 — What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.

Mains practice: Evaluate the statutory powers and limitations of the National Commission for Protection of Child Rights (NCPCR) in holding global technology intermediaries accountable for child safety violations.

The National Commission for Protection of Child Rights (NCPCR), established under the Commissions for Protection of Child Rights (CPCR) Act, 2005, is India's apex statutory body for safeguarding child rights. Its recent summons to Meta over Child Sexual Exploitation and Abuse Material (CSEAM) highlights its critical role in regulating digital spaces.

• **Statutory Powers of NCPCR:**

Under Section 14 of the CPCR Act, 2005, the NCPCR enjoys the powers of a civil court trying a suit under the Code of Civil Procedure, 1908. This includes summoning and enforcing the attendance of any person, discovering and producing documents, and receiving evidence on affidavits. It can conduct suo motu inquiries into child rights violations, summon executives of multinational corporations, and recommend the registration of FIRs or legal proceedings to law enforcement agencies.

• **Limitations in Accountability Enforcement:**

Despite these powers, the NCPCR faces significant structural limitations. First, it lacks direct punitive or enforcement authority; its recommendations are advisory and not binding on courts or the government. Second, global tech giants often exploit jurisdictional gaps, claiming safe harbour under the IT Act or citing algorithmic limitations, which complicates the enforcement of domestic child safety standards. Third, the Commission faces constraints in technical expertise required to audit complex, AI-driven algorithmic feeds of social media platforms.

To effectively safeguard children in the digital age, the NCPCR's civil powers must be complemented by robust technical collaboration with MeitY and law enforcement, alongside stricter enforcement of intermediary guidelines.

Prelims practice questions

Q1. With reference to the National Commission for Protection of Child Rights (NCPCR), consider the following statements: 1. It is a constitutional body established under Article 350B of the Constitution. 2. It has the powers of a civil court while inquiring into any matter under the CPCR Act, 2005. 3. It functions under the administrative control of the Ministry of Electronics and Information Technology. Which of the statements given above is/are correct?

1 and 2 only
2 only
2 and 3 only
1, 2 and 3

Answer: B. NCPCR is a statutory body (not constitutional) established under the CPCR Act, 2005. It functions under the Ministry of Women and Child Development (not MeitY). It has the powers of a civil court under the Code of Civil Procedure, 1908.

Q2. Under the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, what is the consequence if a social media intermediary fails to observe due diligence regarding Child Sexual Abuse Material (CSAM)?

The platform is immediately banned from operating in India.
The platform loses its 'safe harbour' protection under Section 79 of the IT Act.
The platform's executives face mandatory minimum imprisonment of 10 years without trial.
The platform is absorbed under the direct control of MeitY.

Answer: B. If an intermediary fails to observe due diligence as prescribed under the IT Rules, 2021, it loses its safe harbour immunity under Section 79 of the IT Act, making it liable for third-party content hosted on its platform.

Q3. Which of the following international conventions, to which India is a signatory, forms the bedrock of the Commissions for Protection of Child Rights (CPCR) Act, 2005?

Hague Convention on Intercountry Adoption
Geneva Convention on Child Welfare
Beijing Rules on Juvenile Justice
UN Convention on the Rights of the Child (UNCRC)

Answer: D. The CPCR Act, 2005 was enacted to give effect to the UN Convention on the Rights of the Child (UNCRC), which India ratified in 1992.

Revision flashcards

What statutory act established the NCPCR, and in which year did it become operational? The Commissions for Protection of Child Rights (CPCR) Act, 2005; the Commission became operational in March 2007.
Which Ministry serves as the nodal administrative ministry for the NCPCR? The Ministry of Women and Child Development (MWCD).
What specific judicial powers are vested in the NCPCR during its inquiries? It is vested with the powers of a civil court trying a suit under the Code of Civil Procedure, 1908 (e.g., summoning witnesses, requisitioning public records).
What is 'Safe Harbour' protection under Section 79 of India's IT Act, 2000? It exempts intermediaries (like social media platforms) from liability for third-party data or communication links hosted by them, provided they perform due diligence.
What does the acronym CSEAM stand for in the context of online child safety? Child Sexual Exploitation and Abuse Material (often used interchangeably with CSAM - Child Sexual Abuse Material).