Case UpdateData Protection & Privacy📍 Supreme Court of India
Supreme Court Directs Centre, CBSE To Amend APAAR Consent Form To Give Opt-Out Option; Restricts Data Sharing
The Supreme Court has directed the Union Government and CBSE to modify the consent form for the Automated Permanent Academic Account Registry (APAAR) ID to explicitly include opt-out/refusal options and strict limitations on third-party data sharing.
Whether mandatory generation of APAAR student IDs without explicit opt-out options and data-sharing restrictions violates privacy rights under Article 21.
The Supreme Court of India has issued vital privacy directions regarding the implementation of the Automated Permanent Academic Account Registry (APAAR) ID system for school students. A Bench of the apex court directed the Union Ministry of Education and the Central Board of Secondary Education (CBSE) to amend the APAAR consent form to ensure it contains explicit options for parents and students to opt out or refuse consent.
Key Directviews on Student Data Privacy
The Court observed that creating an automated digital identity for students must respect personal data autonomy under Article 21 of the Constitution. To prevent unauthorized data commercialization or surveillance, the Court passed the following mandates:
Opt-Out Mechanism: The consent form must clearly allow parents/guardians to refuse or revoke consent without impacting the student's admission or academic evaluation.
Third-Party Restriction: The Centre and CBSE are prohibited from sharing student demographic or academic data with third-party private entities or agencies without explicit judicial or statutory sanction.
Data Minimization: Information collected under APAAR must strictly serve educational record-keeping purposes.
The ruling enforces robust digital privacy standards across educational institutions rollouts under the National Education Policy (NEP).
📌 Held by the Court
Held that the APAAR consent form must be amended to provide an explicit opt-out/refuse option and that student data sharing with third parties must be strictly restricted.
⚡ Practical Impact
Ensures schools cannot make APAAR IDs mandatory for admissions or examinations and obligates educational boards to uphold strict digital privacy norms.
👔 For Lawyers & Advocates
Crucial precedent regarding data protection in public educational databases and constitutional privacy rights of minors under Article 21.
🤖 Key Takeaway
Digital identification schemes in public services must incorporate explicit opt-out mechanisms and data minimization protocols to survive Article 21 constitutional scrutiny.
