"Meta's $17.1 Billion Child Safety Settlement Shapes India's Platform Regulation Debate"
Design liability
legal accountability of a platform for harms caused by its own product features, not user-generated content.
COPPA
US federal law (1998) requiring parental consent before collecting personal data from children under 13.
The question of whether digital platforms bear legal responsibility for harms caused by their own design, as distinct from harms caused by third-party content hosted on them, has been a defining governance debate of the internet age. In the United States, Section 230 of the Communications Decency Act has historically shielded internet intermediaries from liability for user-generated content. This immunity, however, was always understood to cover content liability, not liability arising from a platform's own design choices. That distinction became the legal foundation for the case against Meta.
In India, the analogous framework is Rule 4 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. It imposes due-diligence obligations on significant social media intermediaries, including grievance redressal and content takedown timelines, but stops short of holding platforms liable for design-induced harms. The Protection of Children from Sexual Offences (POCSO) Act and the IT Act, 2000 together form the primary legislative architecture for child safety online in India. Neither directly addresses algorithmic design as a source of harm. Globally, the EU's Digital Services Act (DSA) represents the most comprehensive attempt to impose systemic risk-assessment obligations on very large online platforms, including obligations specifically related to the protection of minors.
The Meta settlement arose from a bipartisan coalition of US state attorneys general who accused the company of designing Facebook and Instagram to encourage compulsive use by children, concealing the associated risks, and collecting personal data from children under 13 without parental consent. A key legal lever was the Children's Online Privacy Protection Act (COPPA), a US federal law enacted in 1998, years before any of today's major social media platforms existed. COPPA gave regulators a concrete statutory route: rather than proving the contested causal link between a recommendation algorithm and depression or anxiety, the states could simply establish whether Meta collected children's personal data without meeting COPPA's parental notice and consent requirements.
The settlement, valued at up to $17.1 billion, is not merely a financial penalty. It imposes enforceable product-level changes. Users below 18 will face a default combined two-hour daily limit across Instagram and Facebook, which can be lifted only with parental permission. …
Challenges of digitalisation
Consider the following statements regarding the Children's Online Privacy Protection Act (COPPA) of the United States:
1.It was enacted in 1998, before major social media platforms like Facebook and Instagram existed.
2.It requires parental consent before collecting personal data from children under the age of 13.
3.It directly prohibits social media platforms from allowing users below 18 to create accounts.
Which of the statements given above is/are correct?
Consider the following statements regarding the Meta settlement on child safety:
1.Users below 18 will face a default combined two-hour daily limit across Instagram and Facebook.
2.Night-time access for minors is blocked by default between 10 pm and 6 am.
3.An independent auditor will oversee compliance with the settlement terms.
4.Meta admitted wrongdoing as part of the settlement agreement.
How many of the above statements are correct?
Match the following regulatory instruments with their primary focus on child/platform safety:
List I (Instrument) — List II (Primary Focus)
A.COPPA (US,
1998)—
1.Systemic risk assessment obligations on very large online platforms including minor protection
B.IT (Intermediary Guidelines) Rules, 2021 (India) — 2. Parental consent for data collection from children under 13
C.EU Digital Services Act — 3. Due-diligence obligations on significant social media intermediaries including grievance redressal
D.Digital Personal Data Protection Act, 2023 (India) — 4. Verifiable parental consent before processing children's personal data
Select the correct answer:
With reference to India's proposed regulatory approach to children's social media use, consider the following statements:
1.India is considering a graded model with separate restrictions for children aged 8–12, 12–16, and 16–18.
2.The Digital Personal Data Protection Act, 2023 already contains provisions requiring parental consent before processing children's data.
3.Rule 4 of the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 explicitly addresses algorithmic design as a source of harm to minors.
Which of the statements given above is/are correct?
The concept of 'design liability' for social media platforms, as distinct from 'content liability', implies that:
1.Platforms can be held responsible for harms caused by features like infinite scroll and algorithmic amplification, not just user-generated content.
2.Intermediary immunity under frameworks like Section 230 (US) does not extend to a platform's own design choices.
3.Establishing design liability requires proving that a specific algorithm caused a specific mental health outcome in a specific user.
Which of the statements given above is/are correct?
Want the full note, Prelims Facts & MCQ answers?
Create a free account — takes less than a minute.
Create free account