Just Rights for Children Alliance & Anrv.S Harish & Ors

Case Snapshot

· Case Name: Just Rights for Children Alliance & Anr. v. S. Harish & Ors.

· Citation: 2026 INSC 1149

· Bench: Justice J.B. Pardiwala and Justice K.V. Chandran

· Date of Judgment: October 15, 2026

· Area of Law: Cyber Law – Child Rights – IT Act – POCSO Act – Article 21 – Intermediary Liability

The Judgment in One Line

The Supreme Court directed the Union of India to create a national hash database, impose heavy penalties on intermediaries, and ruled that children have a fundamental right to access the internet.

Why This Judgment Matters

This judgment shifts the paradigm from reactive content takedowns to a proactive, systemic framework for combating Child Sexual Exploitation and Abuse Material (CSEAM). By directing the creation of a national Hash & URL List Database and imposing strict reporting timelines, the Court has significantly enhanced intermediary accountability. It moves beyond the traditional "safe harbour" shield of Section 79 of the IT Act, proposing exemplary fines and profit disgorgement. Importantly, it balances child safety with constitutional rights by refusing to impose blanket age-based internet bans, thereby protecting children's right to digital access while ensuring robust safeguards.

Background

The matter arose from previous directions passed by the Court in a 2024 judgment concerning the alarming circulation of CSEAM on social media platforms. Despite those directions, recent reports indicated that intermediaries continued to fail in reporting such material to the Special Juvenile Police Unit (SJPU) and were allowing indirect links to bypass detection. The Court took suo motu cognizance of these systemic failures, noting that platforms were allowing paid promotions of tools designed to create such abusive material while hiding behind "advertising standards."

Issues Before the Court

1. How to ensure effective detection and removal of CSEAM across all platforms simultaneously?

2. What are the regulatory liabilities and penalties for intermediaries failing to comply with the IT Rules?

3. Whether blanket age-based restrictions on internet access for children violate fundamental rights?

4. What constitutes CSEAM under the regulatory framework of the IT Act as opposed to the penal provisions of the POCSO Act?

What Did the Supreme Court Hold?

Broadening the Definition of CSEAM

· The Court clarified that under the IT Act and its Rules, CSEAM is not limited to explicit visual depictions (as required under POCSO).

· It includes advertisements or promotions that, while not containing explicit imagery themselves, direct users to tools or applications capable of generating or manipulating such material. Such indirect facilitation falls squarely under Section 67B of the IT Act.

National Database and Proactive Detection

· The Union of India is directed to create a National Hash & URL List Database (either within the Sahyog Portal or as a standalone entity).

· Social media intermediaries must use "Perceptual Hashing" and URL listing to cross-check and remove CSEAM.

· Any entry into the database requires multiple tiers of verification, including preliminary software screening and final assessment by at least three trained human analysts.

Strict Reporting Timelines

· For CSEAM of "Unknown Origin" (detected by the intermediary's own tools), it must be reported to the SJPU/local police within two hours of removal.

· For CSEAM of "Known Origin" (detected via a match in the National Database), intermediaries must submit consolidated weekly reports to the database authority.

Grievance Redressal and Awareness

· Intermediaries must provide a simple, uniformly labeled category to report CSEAM within two steps. Reporting must allow for anonymity.

· The Court mandated age-appropriate sex education, digital safety training, and awareness campaigns in schools.

Penalties and the Right to Internet

· Section 79 (safe harbour) is insufficient. The Court urged the government to frame exemplary monetary fines and disgorgement of profits from paywalled content hosting illicit material.

· The Court held that the right to access the internet is a fundamental right under Article 21. It refused to endorse blanket bans on children's internet access, noting such bans drive children to unregulated spaces. Instead, it suggested mechanisms like parental consent and a "child mode" for accounts.

Key Legal Principles

CSEAM includes indirect promotion of tools capable of generating or manipulating explicit content.

2. The right to access and use the internet is a fundamental right under Article 21.

3. Intermediaries cannot claim safe harbour under Section 79 if they persistently fail to comply with IT Rules.

4. A national Hash and URL database is essential for proactive, cross-platform removal of CSEAM.

5. Reporting mechanisms for CSEAM must be anonymous, standardized, and easily accessible.

6. Blanket internet restrictions on children are disproportionate and push them toward unsafe digital spaces.

Important Precedents

· Just Rights for Children Alliance v. S. Harish (2024): Established that intermediaries must report CSEAM to the SJPU under POCSO and cannot rely solely on international NGOs.

· Anuradha Bhasin v. Union of India: Recognized that freedom of speech and trade through the internet is protected under Article 19.

· Pragya Prasun v. Union of India (2025): Held that the right to digital access is an intrinsic component of the right to life under Article 21.

Practical Impact

Advocates advising tech companies and intermediaries must ensure immediate compliance with the new reporting timelines and database integration. Cyber law practitioners will see a shift toward direct penal liability for systemic non-compliance, bypassing the traditional safe harbour defense. This judgment will be heavily cited in matters concerning intermediary liability, child rights, and digital privacy. Educational institutions and NGOs now have a judicial mandate to implement digital safety and sex education programs, impacting administrative compliance for schools.

Lawcurb Quick Insight

The Court linked child safety with the right to access the internet, rejecting blanket bans because they push children into unregulated, unsafe spaces. The focus is on punishing the creators and negligent intermediaries, not restricting the victims.

Lawcurb Practice Note

When advising intermediaries, ensure they implement the two-step anonymous reporting mechanism and dedicate a specific grievance officer for CSEAM. Non-compliance now attracts direct monetary penalties, not just the loss of safe harbour.

Remember This Ratio

CSEAM detection requires proactive hash-matching, and intermediaries face direct penalties for non-compliance, while children retain their fundamental right to internet access.

Exam Lens

Question 1: How does the Supreme Court distinguish between the scope of CSEAM under the POCSO Act and the IT Act?

Answer: Under POCSO (a penal statute), CSEAM requires an explicit visual depiction. However, under the IT Act (a regulatory statute), CSEAM is construed broadly to include indirect advertisements or promotions of tools that facilitate the creation or circulation of such material, even without explicit visual depiction.

Question 2: Why did the Court reject blanket age-based restrictions on internet access for children?

Answer: The Court held that the right to internet access is a fundamental right under Article 21. Blanket bans are disproportionate, require invasive age-verification data collection, and drive children to unregulated, unsafe platforms. The Court instead suggested parental consent and "child mode" features.

Question 3: What is the "Hash and URL Data Matching" mechanism?

Answer: It is a technology where a unique alphanumeric digital identifier (Hash) is generated for known CSEAM. Intermediaries use this to crosscheck content on their platforms, allowing for automatic flagging and immediate removal across all platforms without relying on manual reports.

This report is prepared by Lawcurb for educational and informational purposes only. It is a concise summary of the judgment and should not be construed as legal advice. Readers are encouraged to refer to the original judgment before relying on any legal proposition.

Final Outcome

· Union of India directed to create a National Hash & URL List Database for CSEAM.

· Intermediaries must report "Unknown Origin" CSEAM within two hours to SJPU/police.

· Blanket internet bans for children rejected; right to digital access upheld.

· Directions issued for mandatory digital safety and age-appropriate sex education in schools.

· Matter posted for further compliance and progress report on December 10, 2026.

Lawcurb Verdict

This judgment is a landmark intervention in the intersection of technology, child rights, and constitutional law. By shifting the burden from reactive takedowns to proactive detection, the Supreme Court has addressed the systemic failures of intermediaries. It beautifully balances the protection of children from digital harm with their fundamental right to access the internet, ensuring that safety and freedom are not treated as mutually exclusive.