Big question on children’s data, NHRC sent notice to states and central government

By Samira Vishwas On Mar 1, 2026

Cyber: The National Human Rights Commission (NHRC) has expressed serious concern about the security and privacy of children’s data. The Commission has issued notices to all state governments, Union Territory administrators and concerned departments of the Central Government. This action has been taken on the basis of a complaint by NAMO Foundation, in which questions have been raised on the use of children’s educational data.

Questions raised on ‘Pratham-Anthropic’ cooperation

Under a collaboration between Anthropic and Pratham “Anytime Machine Testing” It is alleged that the written answer sheets and educational data of the children were being processed using the AI system named ‘Naam’. The complaint states that the confidentiality of children’s personal data may be at risk in this process. It is also alleged that there may exist risks such as potential misuse of data, transfer abroad and processing without proper consent. Also, it is feared that this system may violate India’s Digital Personal Data Protection (DPDP) Act, 2023 or other laws.

Cyber: NHRC’s opening remarks

The National Human Rights Commission has said that prima facie this case may be related to violation of human rights of children. The Commission clarified that the use of AI and new technology is necessary, but children’s rights, education policy and data protection laws should be fully followed.

Cyber: Strict instructions to states and center

The Commission has directed the Chief Secretaries of States and Administrators of Union Territories to: Not misuse the data of children in any way. There should be no violation of DPDP Act, 2023 or other Indian laws. All MoUs and agreements made with NGOs should be reviewed.

Report called for in two weeks

NHRC has sought detailed action taken report from all concerned departments within two weeks. This includes data security measures, parental consent processes, information on data storage and transfer, and risk mitigation measures.

What next?

Cyber: Now the focus will be on what response the state governments and concerned departments give. If deficiencies are found in data security or legal rules, strict action will also be taken against the concerned institutions. yes Can.