The Supreme Court of India issued a directive on July 20, 2026, requiring the Central Board of Secondary Education (CBSE) to obtain explicit parental consent before generating Automated Permanent Academic Account Registry (APAAR) IDs for students. The order aligns the scheme with the Digital Personal Data Protection Act, 2023.

The Supreme Court’s directive was delivered on July 20, 2026, mandating nationwide implementation of an Orissa High Court order issued in December 2025 that set consent standards for the APAAR ID system [1]. The order applies to all CBSE-affiliated schools across India, requiring the board to revise its consent forms and data-handling procedures [3].

The parties to the ruling include the Supreme Court of India, the Central Board of Secondary Education, the Orissa High Court, and the parents and students enrolled in CBSE schools [1]. The Supreme Court endorsed the High Court’s reasoning that consent is a legal prerequisite for processing minors’ personal data, and it instructed CBSE to incorporate an opt-out mechanism into its APAAR registration process [2].

Legal Background and Scope of the Directive

The Orissa High Court’s December 2025 judgment addressed concerns that the APAAR scheme, which creates a unique 12-digit student identifier, effectively compelled schools to collect and store children’s biometric and demographic data without parental permission [1]. Petitioners argued that the scheme conflicted with the Digital Personal Data Protection Act, 2023, which mandates explicit consent for processing personal data of individuals under 18 [2]. The High Court ordered CBSE to redesign its consent form, allowing parents to refuse or withdraw consent.

On July 20, 2026, the Supreme Court affirmed the High Court’s order and extended its applicability to all CBSE schools nationwide [3]. The apex court’s directive emphasizes that the APAAR ID generation must be contingent upon a signed parental consent form, and that schools must retain a record of any refusal or opt-out decision [4]. The ruling also requires CBSE to ensure that the data handling practices for APAAR IDs comply with the security and privacy provisions of the 2023 Data Protection Act [1][2].

However, the board must now provide a clear, separate “opt-out” option on the consent form, and must not penalize students whose parents decline participation [4].

The Supreme Court’s decision does not alter the technical structure of the APAAR system; the 12-digit identifier will continue to be generated for students whose parents provide consent [3]. However, the board must now provide a clear, separate “opt-out” option on the consent form, and must not penalize students whose parents decline participation [4].

You may also like

News

India’s Gen-Z Protests Prompt Education Minister’s Resignation

Mass rallies by students and the Cockroach Janta Party from June 6 to July 25, 2026 forced the resignation of Education Minister Dharmendra Pradhan.

Read More →

Implementation Requirements for CBSE

CBSE has been instructed to issue revised consent forms to all affiliated schools within 30 days of the Supreme Court order [1]. The forms must detail the purpose of the APAAR ID, the categories of data to be collected, the storage duration, and the rights of parents to withdraw consent at any time [2]. Schools are required to submit a copy of each signed consent or opt-out notice to the CBSE data-protection office, which will maintain a centralized registry of parental decisions [3].

The board must also update its digital portals to flag students whose parents have opted out, ensuring that no APAAR ID is generated for those cases [4]. CBSE is mandated to conduct a compliance audit by December 2026 to verify that all schools have incorporated the consent mechanism and that data processing aligns with the Digital Personal Data Protection Act, 2023 [1][2].

Failure to comply with the Supreme Court directive may result in legal action against the board or individual schools, though the order does not specify punitive measures beyond the requirement for compliance reporting [3]. CBSE has indicated that it will allocate additional resources to training school administrators on the new consent procedures and data-privacy obligations [4].

Immediate Impact on Students, Parents and Schools

Parents of CBSE-enrolled students now possess a legally enforceable right to refuse participation in the APAAR ID scheme, eliminating the previous de-facto requirement to provide consent [1]. Schools must accommodate opt-out decisions without affecting a student’s eligibility for examinations, board certifications, or other academic services [2].

Schools must accommodate opt-out decisions without affecting a student’s eligibility for examinations, board certifications, or other academic services [2].

Students whose parents decline consent will not receive an APAAR ID, which may affect the ability of schools to use certain digital services that rely on the identifier, such as automated result dissemination or inter-school data exchanges [3]. However, CBSE has committed to providing alternative mechanisms for these services that do not depend on the APAAR ID [4].

You may also like

News

Karnataka Announces India’s First Government‑Run AI University and AI Hub

Karnataka announced plans for a state‑run AI University and AI Hub, aiming to become an AI‑native state and boost its startup ecosystem.

Read More →

For educators and administrators, the directive introduces new administrative tasks, including the collection, verification, and secure storage of consent documentation. The requirement to report compliance status to the CBSE data-protection office adds a reporting layer that will be monitored throughout 2026 [1][2]. The move also signals heightened regulatory scrutiny of student data practices across Indian educational institutions [3].

Key Facts

What: Supreme Court directs CBSE to obtain parental consent before issuing APAAR student IDs.

When: Directive issued July 20, 2026; original High Court order dated December 2025.

What: Supreme Court directs CBSE to obtain parental consent before issuing APAAR student IDs.

Impact: Parents can now refuse or opt out of the APAAR ID scheme; CBSE must revise consent forms and ensure data-privacy compliance nationwide.

You may also like

News

Two‑Thirds of India’s AI Professionals Anticipate Layoffs as Tech Job Cuts Accelerate

The anonymous professional networking platform Blind released survey results on 7 July 2026 indicating that two‑thirds of AI and machine learning professionals based

Read More →

Sources

• Supreme Court directs CBSE to implement Orissa HC order regarding APAAR IDs – https://www.indiatoday.in/education-today/news/story/apaar-id-consent-form-supreme-court-cbse-opt-out-orissa-high-court-2951935-2026-07-20
• Consent Required For CBSE APAAR ID: Supreme Court Directs Opt-Out Option In Forms – https://www.news18.com/education-career/consent-required-for-cbse-apaar-id-supreme-court-directs-opt-out-option-in-forms-10222793.html
• Supreme Court to direct CBSE to implement APAAR consent form changes – https://economictimes.indiatimes.com/industry/services/education/supreme-court-to-direct-cbse-to-implement-apaar-consent-form-changes-across-india/articleshow/132513045.cms
• SC to Direct CBSE to Implement Orissa HC APAAR Consent Order Nationwide – https://www.timesnownews.com/education/supreme-court-to-direct-cbse-to-implement-orissa-hc-apaar-consent-order-nationwide-article-155141310