Why the NCPCR has summoned Meta over ads linked to child sexual abuse material
A child rights body can summon a tech giant, but can it make it act? The Meta case tests the limits.
Published 13 September 2026. Written by Pratidin from the reports linked at the end; every fact checked by a separate review before publishing. How we work
The National Commission for Protection of Child Rights (NCPCR) is examining how advertisements linked to Child Sexual Exploitative and Abuse Material (CSEAM) came to run on Meta's platforms. An investigation by the BBC reported dozens of ads promoting such material on Instagram despite Meta's own policy banning it, and the Tech Transparency Project, a watchdog group, reported hundreds of such ads on Facebook and Instagram, some shown to users in India. The Indian Express explainer says the NCPCR first sent Meta a notice on 3 July 2026 and summoned its officials to a hearing on 9 September. The Ministry of Electronics and Information Technology (MeitY) has also issued a notice asking Meta to disable such content and explain gaps in its algorithmic safeguards. Meta has said that "no system is perfect" and that it had identified and disabled some violating ads and accounts.
Several laws apply. Section 19 of the Protection of Children from Sexual Offences (POCSO) Act, 2012 obliges any person, including a company, who knows of a sexual offence against a child to report it. Section 67B of the Information Technology (IT) Act, 2000 punishes publishing or transmitting material showing children in sexually explicit acts, with up to five years in prison on a first conviction. Under Section 79 of the IT Act, platforms are shielded from liability for users' content ("safe harbour") only if they observe due diligence, which the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 spell out, including the use of automated tools by large platforms to find such content. The NCPCR itself is a statutory body set up in March 2007 under the Commissions for Protection of Child Rights Act, 2005, and monitors the implementation of the POCSO Act.
Analysts point to why such ads slip through. Automated filters miss coded text and altered images, moderation systems may file abuse material as ordinary "adult content", third-party ad agencies apply loose checks, and many ads carry no illegal image at all but act as bait, linking to encrypted chat groups where the material is shared. Human reviewers, under heavy workloads, also make errors. The case also shows the commission's limits. It has the powers of a civil court when inquiring, so it can summon people and demand documents, but it can only recommend action; penalties must come from MeitY under the IT Act or from the police and courts under POCSO. Child rights advocates want platforms held to proactive detection duties, while platforms stress that no screening system is perfect.
Prelims facts
- The NCPCR is a statutory body set up in March 2007 under the Commissions for Protection of Child Rights Act, 2005.
- The NCPCR has a chairperson and six members, of whom at least two must be women, and it monitors implementation of the POCSO Act, 2012 and the RTE Act, 2009.
- Section 19 of the POCSO Act makes it mandatory for any person, including a company, who knows of a sexual offence against a child to report it.
- Section 67B of the IT Act, 2000 punishes publishing or transmitting sexually explicit material involving children; Section 79 gives platforms safe harbour only if they follow due diligence.
- The NCPCR can summon and inquire like a civil court but can only recommend action; it cannot punish.
Quick recall
- Under which Act was the NCPCR set up?
- The Commissions for Protection of Child Rights Act, 2005; it began work in March 2007.
- Composition of the NCPCR?
- A chairperson and six members, at least two of them women.
- Which two laws does the NCPCR monitor?
- The POCSO Act, 2012 and the Right to Education Act, 2009.
- Which POCSO section makes reporting of offences mandatory?
- Section 19.
- Which IT Act section punishes sexually explicit material involving children?
- Section 67B.
- What is safe harbour?
- Protection under Section 79 of the IT Act for intermediaries from liability for third-party content, conditional on due diligence.
- What does CSEAM stand for?
- Child Sexual Exploitative and Abuse Material.
- When did India ratify the UN Convention on the Rights of the Child?
- 1992.
Prelims practice question
With reference to the National Commission for Protection of Child Rights (NCPCR), which one of the following statements is correct?
- It is a constitutional body set up under Article 39(f).
- It was set up under the Commissions for Protection of Child Rights Act, 2005 and has the powers of a civil court while inquiring into complaints.
- It can impose penalties on social media platforms under the IT Act, 2000.
- It was created by the POCSO Act, 2012.
Show answer
Answer: (b) It was set up under the Commissions for Protection of Child Rights Act, 2005 and has the powers of a civil court while inquiring into complaints.. The NCPCR is statutory, set up in March 2007 under the CPCR Act, 2005, and has civil court powers to summon people and call for documents during inquiries. It is not a constitutional body, it cannot impose penalties (it only recommends), and the POCSO Act only gives it the job of monitoring that law.
Use this in UPSC Mains: previous-year questions
Recurring theme: Child protection institutions and the regulation of social media platforms
- How to use this
The Meta summons shows what the NCPCR can do in the digital space (inquire, summon, recommend) and where it depends on MeitY and police, the core of this question.
- The NCPCR (set up March 2007 under the CPCR Act, 2005) sent Meta a notice on 3 July 2026 and summoned its officials on 9 September over CSEAM-linked ads on its platforms.
- It has civil court powers to summon and demand documents but can only recommend; penalties rest with MeitY under the IT Act or police and courts under POCSO.
- Suggest measures: audited ad-screening standards with loss of Section 79 safe harbour for repeat failures, a formal referral route for child rights commissions, and digital safety education.
- How to use this
Bait ads that lead users to encrypted chat groups are a live case of social media and encrypted messaging being used to spread abuse material beyond regulators' reach.
- Analysts say many CSEAM ads carry no illegal image but act as bait, linking to encrypted chat groups where the material is shared, slipping past image-based filters.
- Existing measures: Section 67B of the IT Act, 2000 punishes such material (up to five years on first conviction); the IT Rules, 2021 require large platforms to use automated detection tools.
- Section 79 safe harbour depends on due diligence; MeitY issued a notice asking Meta to disable such content and explain gaps in its algorithmic safeguards.
Mains practice question
The NCPCR's summons to Meta over ads linked to child sexual abuse material shows both the reach and the limits of India's child protection framework online. Discuss. (250 words)
Model answer
Advertisements linking to child sexual exploitative and abuse material (CSEAM) on Instagram and Facebook led the NCPCR to summon Meta in September 2026, while MeitY issued its own notice.
The framework in place
- NCPCR: statutory body under the CPCR Act, 2005; monitors the POCSO Act; civil court powers to summon and call for records.
- POCSO Act, 2012: Section 19 makes reporting of known offences mandatory, including for companies.
- IT Act, 2000: Section 67B punishes sexually explicit material involving children; Section 79 safe harbour depends on due diligence.
- IT Rules, 2021: large platforms to use automated tools, appoint India-based compliance and grievance officers.
- Courts: in Just Rights for Children Alliance (2024), the Supreme Court held that storing or viewing such material can be an offence and suggested the term CSEAM.
The limits exposed
- Recommendatory body: the NCPCR cannot penalise; enforcement rests with MeitY and the police.
- Ad systems: ads act as bait, linking to encrypted groups, and slip past filters built to find images.
- Human review: overburdened reviewers make mistakes, often dismissing user complaints.
- Jurisdiction: content and servers often sit abroad.
Way forward
- Mandatory, audited ad-screening standards for large platforms, with loss of safe harbour for repeat failures.
- Faster takedown and reporting channels linking MeitY, the NCPCR and police cyber cells.
- Give child rights commissions binding direction powers or a formal referral route.
- Digital safety education for children and parents.
Children's safety online needs obligations that bind platforms before harm occurs, not only inquiries after it.
The basics
Why this matters
When harmful content appears on a global platform, who in India can act, and how? The Meta case brings together a child rights commission, two central laws, a set of rules for platforms and a ministry. Knowing which body can do what is exactly what UPSC tests.
The child rights body
The Commissions for Protection of Child Rights Act, 2005 created the National Commission for Protection of Child Rights (NCPCR) and allows States to set up their own commissions. The NCPCR began work in March 2007. It inquires into violations of child rights and monitors how the POCSO Act, 2012 and the Right to Education Act, 2009 are implemented.
- 1NCPCRInquires, summons Meta officials, recommends action
- 2MeitYEnforces the IT Act and IT Rules; issued its own notice to Meta
- 3Police and courtsInvestigate and try offences under POCSO and the IT Act
- 4Platform (Meta)Must follow due diligence under the IT Rules to keep safe harbour
The laws that apply
Three layers work together. The POCSO Act, 2012 defines sexual offences against children and makes reporting mandatory. The IT Act, 2000 punishes publishing such material (Section 67B). And Section 79 gives platforms Safe harbour under Section 79 only if they do their due diligence, which the IT Rules, 2021 describe in detail.
- 1Ad boughtOften through third-party agencies with loose checks
- 2Filters missedCoded words and altered images pass automated screening, or are tagged as ordinary adult content
- 3Link sharedThe ad itself may show nothing illegal but points to an encrypted chat group
- 4Material tradedThe abuse material is shared off the platform, beyond the ad system's view
Powers versus penalties
The commission is quasi-judicial. When inquiring, it has the powers of a civil court: it can summon a person, require documents and receive evidence. But it cannot fine or punish. It sends recommendations to governments or authorities, or approaches courts. Penalties must come from MeitY or from criminal law.
- Summon witnesses and call for documents
- Inquire into violations of child rights
- Monitor POCSO and RTE implementation
- Recommend action to governments
- Impose fines or jail terms
- Order a platform blocked
- Prosecute offenders itself
Go deeper
In one line: A statutory child rights commission has summoned Meta over ads promoting child sexual abuse material, testing how far India's laws reach into global platforms.
Why it matters for UPSC
It combines GS2 (statutory and quasi-judicial bodies, protection of vulnerable sections) with GS3 (social media and cyber security). UPSC asked in 2025 how the NCPCR should address children's challenges in the digital era.
The core idea
Four pieces fit together. The Commissions for Protection of Child Rights Act, 2005 gives the NCPCR powers to inquire but not to punish. The POCSO Act, 2012 defines offences and forces anyone who knows of them to report. The IT Act makes platforms liable unless they qualify for Safe harbour under Section 79. And the IT Rules, 2021 set the due diligence that decides whether they qualify. Meta's ads problem sits at the joint between these pieces.
Numbers and dates to remember
- March 2007: NCPCR set up under the CPCR Act, 2005.
- Chairperson plus six members, at least two of them women.
- POCSO Act 2012: Section 19 mandatory reporting.
- IT Act 2000: Section 67B (up to five years on first conviction); Section 79 safe harbour.
- 3 July 2026: NCPCR notice to Meta; 9 September 2026: hearing.
- 1992: India ratified the UN Convention on the Rights of the Child.
Where to go next
- Commissions for Protection of Child Rights Act, 2005: the law behind the NCPCR and its powers.
- POCSO Act, 2012: India's main child sexual offences law.
- Safe harbour under Section 79: when a platform is not liable for users' content.
- IT Rules, 2021: the due diligence duties that keep safe harbour.
Go deeper: who should carry the burden of keeping CSEAM off platforms?
The case for tougher platform duties. Platforms earn money from ads, so critics argue they must answer for what their ad systems approve. The IT Rules, 2021 already expect large platforms to use automated tools; child rights advocates want this made enforceable, with audits and loss of Safe harbour under Section 79 for repeated failure. The POCSO Act, 2012 already makes it a legal duty for any person or commercial entity that knows of an offence to report it.
The case for caution. Platforms say no screening is perfect and that bait ads carry no illegal image. Courts have also guarded against over-broad liability: in Shreya Singhal v. Union of India (2015), the Supreme Court read Section 79 so that a platform must act on "actual knowledge" through a court order or government notice, not on every private complaint. Heavy-handed rules risk over-removal of lawful speech.
The judiciary's direction. In Just Rights for Children Alliance v. S. Harish (2024), the Supreme Court held that storing or viewing such material can itself be an offence under POCSO and asked Parliament to replace the term "child pornography" with "child sexual exploitative and abuse material", the phrase now used in this case.
The institutional gap. Under the Commissions for Protection of Child Rights Act, 2005, the NCPCR can inquire and recommend but not enforce. Whether child rights bodies need binding powers, or better referral links to MeitY and the police, is a fair Mains debate.
Commissions for Protection of Child Rights Act, 2005
The law that creates the NCPCR and fixes its powers.
In one line: The Commissions for Protection of Child Rights Act, 2005 set up the NCPCR at the Centre and allowed State commissions, with powers to inquire into violations of child rights.
Structure
The NCPCR has a chairperson and six members, at least two of whom must be women. It began functioning in March 2007. States set up State Commissions for Protection of Child Rights under the same Act.
Powers
While inquiring into a complaint, the commission has the powers of a civil court: it can summon and examine people, require documents and receive evidence on affidavit. After an inquiry it can recommend prosecution, relief or other action to governments, and it can approach courts. It cannot itself punish. Other laws have added duties: it monitors implementation of the POCSO Act, 2012 and the Right to Education Act, 2009.
Where to go next
POCSO Act, 2012
India's core law on sexual offences against children.
In one line: The Protection of Children from Sexual Offences (POCSO) Act, 2012 is a gender-neutral law that defines sexual offences against anyone below 18 and sets up child-friendly trials.
Key features
- A child is any person below 18 years.
- Offences include penetrative and non-penetrative sexual assault, sexual harassment and using a child for pornographic purposes.
- Special Courts try cases, with child-friendly procedures such as recording statements without the accused in view.
- Section 19 makes reporting mandatory: anyone, including a company, who knows or suspects an offence must inform the police or Special Juvenile Police Unit; failing to report is itself an offence.
- The Act was amended in 2019 to raise punishments, including the death penalty for aggravated penetrative sexual assault.
Why it is in the news
A platform that learns of abuse material through its ad system and does nothing may fall within the reporting duty. The NCPCR monitors the Act's implementation.
Where to go next
Safe harbour under Section 79
Explains when a platform is not liable for what users post.
In one line: Section 79 of the IT Act, 2000 protects intermediaries such as social media platforms from liability for third-party content, provided they only host it and observe due diligence.
The conditions
The shield applies if the platform does not start the transmission, choose its receiver or change its content, and if it follows the due diligence the government prescribes. It is lost if the platform conspires in an unlawful act or fails to remove content quickly after gaining "actual knowledge" of it.
How courts read it
In Shreya Singhal v. Union of India (2015), the Supreme Court held that "actual knowledge" means a court order or a government notification, not any private complaint. The same judgment struck down Section 66A of the IT Act.
Why it is in the news
Ads are different from users' posts: the platform reviews and is paid for them. That makes the question of Meta's due diligence under the IT Rules, 2021 central to any action against it.
Where to go next
IT Rules, 2021
The due diligence rules that decide whether platforms keep safe harbour.
In one line: The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 lay down the due diligence that platforms must follow to keep protection under Section 79.
What they require
- All intermediaries must publish rules for users, remove unlawful content when directed, and run a grievance system.
- Significant social media intermediaries, those with at least 50 lakh registered users in India, must appoint a Chief Compliance Officer, a nodal contact person and a Resident Grievance Officer, all resident in India, and publish monthly compliance reports.
- They must endeavour to use technology, including automated tools, to proactively identify content depicting rape or child sexual abuse.
Why it is in the news
MeitY's notice asks Meta to explain gaps in its algorithmic safeguards. If a platform is found not to have met these duties, it risks losing Safe harbour under Section 79 and facing liability for the content.
Where to go next
Take the 13 September 2026 quiz: 30 Prelims-style questions with answers