Supreme Court to direct CBSE on APAAR ID opt-out, data protection
Synopsis
Key Takeaways
The Supreme Court on Monday, 20 July indicated it would direct the Central Board of Secondary Education (CBSE) to implement the Orissa High Court's ruling mandating an explicit opt-out option in the consent form for the APAAR (Automated Permanent Academic Account Registry) ID scheme. The apex court also made clear that the scheme must operate within the framework of the Digital Personal Data Protection (DPDP) Act, 2023.
What the Supreme Court Said
A Bench headed by Chief Justice of India Surya Kant, along with Justices Joymalya Bagchi and V. Mohana, said appropriate directions would be passed to ensure the APAAR scheme remains genuinely voluntary and that parental consent forms carry a clear refusal option.
'We will direct CBSE to implement this judgment on a pan-India basis... as the (Orissa) High Court order has been accepted. We are directing CBSE to examine the issues as well,' the Bench observed during the hearing.
The court further clarified that CBSE circulars would remain subject to existing law, including the DPDP Act, 2023, signalling that no administrative directive can override statutory data protection obligations.
The Petition and Core Allegations
The apex court was hearing a writ petition filed by parents of four students challenging the constitutional validity of the APAAR ID scheme and CBSE's decision to require APAAR IDs for Board examination registration.
Senior advocate Indira Jaising, appearing for the petitioners, argued that although the government describes APAAR as voluntary, it is linked to Aadhaar and effectively compels students to obtain Aadhaar to secure an APAAR ID. 'Right to education is not a targeted service. The right to education is a Constitutional right. Therefore, asking a child to get an Aadhaar and an APAAR for being sent up to exams is against the Constitution,' Jaising submitted.
The petition contends that the APAAR framework — an Aadhaar-linked, lifelong academic identifier — creates a centralised digital architecture capable of long-term tracking and profiling of students. It further argues the scheme lacks statutory backing and fails the tests of legality, necessity, and proportionality established in the Supreme Court's landmark K.S. Puttaswamy privacy judgment. The plea also raises concerns over the 'right to be forgotten', arguing that a cradle-to-career digital identity linked with Aadhaar infringes on that right.
The Orissa High Court Ruling
In December 2025, the Orissa High Court held that while authorities consistently described APAAR as voluntary, the model consent form did not reflect that position because it offered no option to refuse consent at the outset.
A single-judge Bench of Justice Sashikanta Mishra observed that the absence of an express opt-out clause undermined the scheme's voluntary nature, noting that 'the model consent form does not appear to have been happily worded.' The High Court directed authorities to amend the form to incorporate an opt-out or refusal clause. That ruling was not challenged, which the Supreme Court noted as the basis for directing its pan-India implementation through CBSE.
Data Protection and Fundamental Rights Concerns
The petition specifically sought strict compliance with the DPDP Act while obtaining parental consent for APAAR enrolment, raising concerns over the collection, storage, and processing of children's personal data. Critics argue that making APAAR mandatory for Board examination registration violates fundamental rights to privacy, education, and decisional autonomy under Articles 21 and 21A of the Constitution.
Notably, this case arrives at a time when India's data protection architecture is still being operationalised, making the court's guidance on children's data particularly significant for future policy.
What Happens Next
The Supreme Court is expected to pass formal directions to CBSE requiring it to revise the model consent form on a pan-India basis and examine broader data protection compliance. The outcome could have significant implications for how the government designs consent mechanisms for Aadhaar-linked education schemes going forward.