Digital academic identity cannot be enforced without parental consent, top court rules while directing CBSE to review privacy safeguards.
The Supreme Court on Tuesday delivered a significant ruling on student data privacy, holding that the government's APAAR ID — a proposed digital academic identity for students — cannot be made compulsory. The bench made it clear that students and their parents must be offered an explicit choice to accept or reject the identifier.
The court also signalled it would issue a formal directive to the Central Board of Secondary Education (CBSE) to conduct a thorough examination of data protection concerns linked to the APAAR ID system.
What is the APAAR ID and why is it contentious?
APAAR, which stands for Automated Permanent Academic Account Registry, is a digital initiative launched by the Ministry of Education. It assigns a unique 12-digit identifier to every student enrolled in recognised schools across India.
The system is designed to create a centralised repository of academic records — from examination results to certificates — that students can access throughout their educational journey. The government has pitched APAAR as a solution to fake certificates and lost documents.
However, privacy advocates and civil society groups have raised red flags over the centralisation of student data, arguing that the system could expose children to surveillance and data breaches. Concerns have also been voiced about the lack of clarity on data-sharing protocols and consent mechanisms.
What the Supreme Court bench said
Hearing a petition challenging the scheme, the bench observed that imposing APAAR ID as a prerequisite for accessing educational services would violate the principles of informed consent. The court underscored that students and their families must have a genuine "opt-out" mechanism.
"You cannot make it mandatory. There has to be a clear choice," the bench said during the proceedings. The court also noted that any scheme that collects personal data — particularly from minors — must meet the highest standards of transparency and security.
While the full order is yet to be made public, the court indicated it would issue specific guidelines to CBSE, which has been the primary implementing agency for APAAR in affiliated schools. The directive is expected to require CBSE to submit a compliance report on data privacy safeguards within a stipulated timeframe.
CBSE's role and the way forward
CBSE has already begun pilot implementations of APAAR in several schools. The board's affiliation manual was updated earlier this year to include provisions for the digital ID, prompting concerns among parents and educators.
With the court's intervention, CBSE is now expected to pause any mandatory enforcement and re-evaluate its data protection framework. The board may also be required to publish a detailed privacy policy and consent form in plain language accessible to parents and students.
The ruling comes at a time when India's Digital Personal Data Protection Act, 2023, is yet to be fully operationalised. The court's emphasis on consent aligns with the broader principles of the new law, which mandates explicit user consent for processing personal data.
What this means for students and parents
For now, no student is required to obtain an APAAR ID against their will. Schools cannot deny admission, examination registration, or certificate issuance solely on the ground that a student does not possess an APAAR ID.
Parents who have already registered their children under the scheme are not obligated to continue. The court has implied that withdrawal options must be made available without penalty or procedural hurdles.
This ruling sets a precedent for how digital identity projects involving minors must be designed — with consent as the cornerstone, not an afterthought.
- Mandatory no more: APAAR ID cannot be enforced on any student.
- Choice is key: Students and parents must have a clear opt-out option.
- CBSE under scanner: Supreme Court to direct board to examine privacy protocols.
- Data protection focus: Ruling aligns with Digital Personal Data Protection Act principles.
- No denial of services: Schools cannot refuse admission or exams for lack of APAAR.
- 21 July 2026: Supreme Court delivers oral observations on APAAR ID.
- Awaiting: Formal written order and CBSE compliance deadline.
FAQ
No. The Supreme Court has made it clear that APAAR ID cannot be made mandatory. Students and parents must be given a clear choice to either accept or decline it.
APAAR stands for Automated Permanent Academic Account Registry. It is a government initiative to assign a unique digital academic identity to students.
The court indicated it would direct CBSE to examine data privacy concerns associated with the APAAR ID system and ensure adequate safeguards are in place.
No. Following the Supreme Court's observations, schools cannot deny any educational service — including admission, examination registration, or certificate issuance — solely due to the absence of an APAAR ID.
While the court's directive specifically mentions CBSE as the implementing agency, the principle of non-mandatory consent applies to all educational institutions across the country implementing the APAAR scheme.
The ruling marks a decisive moment in the ongoing debate over digital identity and student privacy. While the government has maintained that APAAR simplifies academic record management and reduces fraud, the judiciary has drawn a clear line — convenience cannot come at the cost of informed consent, especially when children's data is involved.
As CBSE prepares to review its protocols, parents and students can expect greater transparency and more robust opt-out mechanisms in the coming months. The court's final written order will provide further clarity on timelines and compliance requirements.
