NHRC Probe into Instagram Ads, India’s Online Child Abuse Response

NHRC Probe into Instagram Ads Latest News

• The National Human Rights Commission (NHRC) has issued notices to the Ministry of Electronics and Information Technology (MeitY), the Ministry of Information and Broadcasting (MIB), and the Delhi Police over paid Instagram advertisements that allegedly directed users to Telegram channels offering child sexual abuse material (CSAM). 
• The Commission has sought an Action Taken Report within two weeks. The notice flagged that these advertisements had passed Meta’s review systems and stayed online until they were brought to the company’s attention. 
• The case exposes a larger problem: India receives a huge volume of alerts about online child abuse, but only a small fraction leads to police action.

Two Questions Raised by the NHRC

• The NHRC’s order raises two key issues:
  • Compliance with POCSO reporting duties: Whether statutory reporting obligations under the Protection of Children from Sexual Offences (POCSO) Act, 2012 were followed.
  • Intermediary status of AI-driven platforms: Whether platforms whose AI systems actively shape content can still claim the legal protections available to intermediaries.

The Mandatory Reporting Obligation

• Section 19 of the POCSO Act requires any person who apprehends that an offence is likely to be committed, or knows that one has been committed, to report it to the Special Juvenile Police or the local police. 
• The NHRC has asked Meta whether the alleged offences were reported and, if not, to identify who was responsible for compliance. 
• The Commission stressed that this legal duty cannot be replaced by internal correspondence, grievance redressal or regulatory engagement.

‹ ›

Are AI-Powered Platforms Still Intermediaries?

• A supplementary representation before the Commission argued that Meta’s AI tools now do far more than host third-party content. Its systems generate captions, recommend posting schedules, optimise engagement and assist monetisation.
• The NHRC called this a “significant regulatory question“. It has asked MIB to examine whether such functions are consistent with intermediary status or whether they resemble the role of a publisher of online curated content under the IT Rules, 2021. 
• The core issue is whether the law adequately distinguishes mere hosting of third-party content from substantive platform involvement in generating, curating, recommending, amplifying or monetising it.

Understanding CyberTipline Reports

• India received around 1.9 million CyberTipline reports in 2025. 
• These are alerts generated when tech platforms detect suspected child sexual exploitation and abuse material (CSEAM). 
• The reporting chain works as follows:
  • Tech platforms detect suspected material and report it to the National Centre for Missing and Exploited Children (NCMEC) in the United States, which runs the CyberTipline.
  • Reports linked to India are forwarded to Indian authorities.
  • The National Crime Records Bureau (NCRB) and the Indian Cybercrime Coordination Centre (I4C), both under the Union Ministry of Home Affairs, process these reports.
  • Reports are then assigned to state and district authorities. In Delhi, the Intelligence Fusion and Strategic Operations (IFSO) unit receives them, verifies the district, and forwards them to the relevant police station.
• These reports cover abuse imagery, attempts to distribute such material, online grooming, sextortion, trafficking-related content and accounts suspected of storing CSAM.

From Report to FIR: The Verification Funnel

• Before an FIR is registered, authorities conduct preliminary verification. Investigators use account details, IP logs, linked email addresses, phone numbers, account creation records and digital hash values to identify the jurisdiction from which content was uploaded.
• A hash value acts as a digital fingerprint of a file. Investigators compare the hash of recovered material with the hash in the CyberTipline report to confirm both refer to the same content.
• Not every report progresses. Reports vary widely in quality. Some support immediate action, while others need further verification. 
• An FIR is registered when the material prima facie appears to depict child sexual abuse. A recurring difficulty is verifying the victim’s age. Poor image quality or blurred visuals can prevent police from proceeding.
• NCRB’s Crime in India 2024 report shows how much survives this funnel. 
• Of 1,238 cybercrime cases registered against children under the IT Act that year, 1,099, or nearly nine in ten, involved publishing or transmitting sexually explicit material depicting children.

Investigation and Trial

• Once an FIR is registered, investigators identify the person behind the account by obtaining subscriber information, tracing IP addresses, identifying internet service providers and seizing devices for forensic examination. 
• The chain of custody is documented through certificates under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023.
• Such cases are tried before POCSO Special Courts. Under Section 28(3) of the POCSO Act, these courts have jurisdiction over offences under Section 67B of the IT Act. 
• Convictions depend heavily on digital evidence. 

Structural Limitations

• A CyberTipline report usually identifies where material was found, not where it originated. Establishing origin requires separate investigation.
• Reports pass through multiple agencies before reaching a police station, causing delays even when the child, offender and platform are all in India.
• Offenders increasingly use encrypted platforms and AI-generated content, making traditional detection methods like hash matching less effective.
• Experts argue that equipping agencies is not a one-time fix, as the crime keeps changing shape. Law enforcement must evolve at the same pace.

Conclusion

• The NHRC probe highlights two urgent gaps: weak enforcement of mandatory reporting under POCSO and outdated intermediary rules for AI-driven platforms. 
• India’s system converts only a fraction of abuse alerts into prosecutions because of multi-layered routing, verification hurdles and evolving technology. 
• Faster reporting chains, clearer platform accountability and continuous capacity building are essential to protect children online.

Source: IE