Discuss the adequacy of India's intermediary liability framework under the IT Act and IT Rules, 2021 in addressing platform-hosted child sexual abuse material. Suggest reforms.

Section 79 of the IT Act, 2000 grants intermediaries "safe harbour" immunity conditional on due diligence, operationalised through the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 [1]. The recent MeitY move to summon Meta over Instagram advertisements promoting child sexual abuse material (CSAM), following a BBC investigation, shows the framework is legally sound in design but weak in enforcement [2].

Strengths of the existing framework

• Substantive criminalisation: Section 67B, IT Act punishes publishing or transmitting material depicting children in sexually explicit acts, reinforced by the POCSO Act, 2012, whose Sections 19–20 mandate reporting of such offences [3][4].
• Conditional immunity: In Just Rights for Children Alliance v. S. Harish (2024), the Supreme Court held that intermediaries failing to remove and report CSEAM forfeit Section 79 protection and face prosecution [5].
• Due-diligence architecture: The 2021 Rules require grievance officers, time-bound takedowns and, for significant intermediaries, automated tools to detect child sexual abuse content [1].

Inadequacies exposed

• Ad-moderation blind spot: Rules focus on user-generated content; paid advertisements, which platforms actively curate and monetise, attract no stricter standard despite implying higher culpability [2].
• Reactive enforcement: Action followed journalistic exposure, not regulatory detection; summons are pre-enforcement fact-finding, not penal action [2].
• Self-regulation gap: Meta's declared "zero-tolerance" policy and AI detection failed at approval stage, revealing unaudited algorithmic claims [2].
• Cross-platform leakage: Ads routed users to Telegram channels, beyond any single intermediary's compliance perimeter [2].

Reforms suggested

• A distinct, stricter liability standard for paid advertisements, with pre-approval verification duties.
• Mandatory independent audits of platform CSAM-detection systems, with disclosure to MeitY.
• Statutory timelines and penalties for non-reporting, aligned with POCSO Sections 19–20.
• Strengthen I4C and NCPCR coordination for a single CSAM reporting portal, as the Supreme Court itself recommended [5].

Effective child protection online requires shifting platforms from reactive takedown to preventive accountability. Harmonising the IT Rules with POCSO's reporting mandate, backed by auditable compliance, would give India a framework matching the constitutional promise under Article 39(f) of protecting childhood against exploitation.