A Child Safety Plan That Could Affect Every Adult
A proposed framework to protect children online in India has surfaced an uncomfortable trade-off: in order to keep minors off certain platforms, the system may need every single adult user to prove, biometrically, that they are not a child. The issue was the focus of a roundtable held in New Delhi on July 31, where lawyers, psychiatrists, and digital rights experts convened, hosted by MediaNama, to pick apart India's proposed three-tier children's data and safety framework.
The core tension is simple to state but hard to solve. If a platform wants to reliably block children from certain content or features, it needs some way to confirm a user's age. In India, the most readily available large-scale identity system is Aadhaar, the country's biometric ID program that already covers the vast majority of the population through fingerprint, iris, and facial data. Using Aadhaar for age verification would mean that adults, not just minors, would need to authenticate themselves biometrically just to prove they fall outside a protected age category.
How the Three-Tier Framework Is Supposed to Work
According to the discussion at the roundtable, the framework under consideration divides child safety obligations into three tiers, likely differentiating by age brackets or platform risk levels, though the exact thresholds were not the focus of the reporting. What matters for privacy watchers is the mechanism underneath: age verification for social media would rely on identity infrastructure originally built for welfare delivery and government services, not for gatekeeping access to online platforms.
That repurposing raises questions that go beyond this single policy. Aadhaar was designed to authenticate identity for subsidies, banking, and government benefits. Using it as a universal proof of adulthood introduces a new category of exposure: platforms, verification intermediaries, or the government itself would need to process biometric confirmations at a scale covering nearly every internet user in the country, whether or not they have children in the household or any interest in child-focused content restrictions.
Why Biometric Age Checks Worry Privacy Advocates
The psychiatrists and lawyers who joined the MediaNama roundtable reportedly flagged concerns that go beyond simple data collection. Biometric identifiers, unlike passwords or account credentials, cannot be reset if compromised. A fingerprint or iris scan tied to an age-verification transaction becomes a permanent marker that, once exposed or misused, cannot be reissued the way a leaked password can.
This isn't the first time Indian authorities have taken an expansive view of what privacy should mean in public or quasi-public digital spaces. In a separate proceeding, government lawyers in a Delhi High Court case argued that privacy in public settings is something of a legal oxymoron, a position that signals how officials may approach the balance between surveillance-adjacent tools and individual rights when child safety or public order is the stated justification.
India is also not alone in grappling with the tension between verification and overreach. Regulators in other countries have proposed their own mandatory identity or licensing systems for digital access, and the pushback has been consistent. Turkey's recent move to require government-issued licenses for VPN providers drew a similar wave of criticism, with critics arguing that licensing requirements risk becoming tools for broader control rather than narrowly tailored safety measures. The pattern across these cases is that a policy framed around protecting a vulnerable group, whether minors or the public more broadly, ends up requiring infrastructure that touches everyone.
What This Means For You
If you are a social media user in India, this proposal is still in the discussion phase, but it's worth understanding what could change if a biometric-based age verification system moves forward. Any requirement to link Aadhaar biometrics to social media accounts would mean your platform activity becomes traceable to a government-issued identity record in a way it currently is not. That has implications for anonymity, for the ability to use pseudonymous accounts, and for how much data aggregation becomes possible across services if verification providers or platforms retain records of these checks.
Even if you have no children and no direct stake in child safety policy, a universal age-verification mandate would still require your participation, since the only way to prove you are an adult under such a system is to submit to the same biometric check as everyone else. That is the paradox the roundtable participants highlighted: a policy meant to shield a subset of users ends up requiring authentication from the entire user base.
Staying Informed and Protecting Your Data
The proposal has not been finalized, and public discussion, like the MediaNama roundtable, is part of the process by which such frameworks get scrutinized before implementation. Readers who want to stay ahead of these developments should watch for official consultation papers or draft legislation from Indian regulators, since public comment periods are often the only window for meaningful input before rules take effect.
In the meantime, it's worth reviewing what identity information you've already linked to your online accounts and being cautious about consenting to any new verification request until you understand exactly what data it collects and how long it will be retained. As age verification for social media becomes a recurring policy debate in India and elsewhere, understanding the mechanics behind these systems, not just their stated goals, is the best way to evaluate whether a given proposal genuinely protects children or simply expands the scope of digital surveillance for everyone.
