The Contract a Child Cannot Sign: Who Owes Protection When "I Accept" Means Nothing in Law

The Click That Binds No One

What the

Court put its finger on Every social media account begins with a tap on "I accept." The Supreme Court has now pointed out what that tap legally is: a contract. Two laws decide the rest. Section 3 of the Majority Act, 1875, sets majority at 18.

Section 11 of the Indian Contract Act, 1872, makes anyone below that age incompetent to contract. The result is plain. An account opened by a 14-year-old rests on an agreement that is void ab initio. It never existed in law.

The Solicitor General agreed. The Bench suggested that the Centre use Sections 4 and 9 of the IT Rules, 2021, to direct platforms to honour an 18-year threshold.

The ethical point underneath the legal one A void contract is not just a technical defect.

Platforms collect a child's data, shape her feed and sell her attention to advertisers. All of this runs on an agreement she was never capable of making.

Now sit with the harder part The easy answer would be to enforce 18+ and close the matter.

But picture who pays for that answer.

• The student who studies online: a 15-year-old in a small town preparing for board exams from free video lectures and peer study groups loses a real tool for learning.
• The child who simply lies: platforms already rely on self-declared birth dates. A hard bar teaches children to type a false year and they then enter the platform classified as adults, without even the weak protections meant for minors.
• The child with no willing guardian: parent-controlled accounts assume a parent who is present, digitally literate and acting in the child's interest. Many children do not have that. Protection that pushes children into disguise has not protected them. It has only made them invisible.

Where the

decision should land The right answer is to put a duty of care on the platforms, rather than rely on exclusion alone.

1. Separate the contract from access. The 18-year rule should govern who can be treated as a full contracting user whose data is monetised. It should not decide who is allowed to learn.
2. No profiling of children. The DPDP Act, 2023, already bars tracking, behavioural monitoring and targeted advertising aimed at children. Directions under the IT Rules can bring that standard forward now.
3. Verification is the platform's burden. The company that profits from the user is the party that must verify her age, using methods that protect privacy. The burden should not fall on the child.
4. Supervised, safe-by-default access for teenagers. Accounts for 13 to 17-year-olds should be private by default, closed to messages from strangers and focused on education.

What this costs: teenagers give up some privacy from their parents, platforms bear real compliance costs and no age check will be perfect. Those costs are real. They are still smaller than the alternative, which is a system where children either remain the product or learn that lying is the price of learning.