NCMEC asks India to drop dual child abuse reporting rules

The US National Center for Missing & Exploited Children has asked India not to force platforms to report suspected child sexual exploitation twice — once to NCMEC and again to Indian authorities. Duplicate filings, the organisation argues, would burden law enforcement and delay action to protect children.

John Shehan, senior vice president at NCMEC, set out the case in a letter dated November 6. He addressed it to Union Home Secretary Govind Mohan, MeitY Secretary S Krishnan and the Indian Cyber Crime Coordination Centre (I4C). The Economic Times first reported the correspondence.

What does NCMEC actually argue?

The letter rests on US law. Platforms such as Meta, Google and Snapchat must report suspected child sexual abuse material (CSAM), online enticement and child sex trafficking to NCMEC's CyberTipline. They cannot discharge that duty by reporting only to a foreign agency. India, NCMEC notes, already receives the material.

The numbers behind that claim:

• NCMEC made more than 5.5 million CyberTipline reports available to the I4C between January 2025 and September 2026.
• It shared 77% of them within an hour and 89% within 24 hours.
• Reports linked to India reached the I4C in an average of 52 hours.
• The reports contained more than 6.5 million images and videos; NCMEC added notes on content, context and severity to 64% of them to help Indian authorities prioritise cases.

If platforms file with both the I4C and NCMEC, Indian authorities would receive two reports on the same case. NCMEC also cited the UK and Brazil, which carved out exceptions to direct reporting requirements for platforms already reporting to the US body. It has requested a meeting with Indian officials.

How do reports reach India today?

The current pipeline is simple. Platforms report to NCMEC, which forwards India-linked reports to the I4C. A 2019 memorandum between the National Crime Records Bureau (NCRB) and NCMEC underpins the arrangement; the I4C later replaced the NCRB as recipient.

That pipeline is now bending. In September, Meta said it would report child safety matters directly to the cybercrime portal operated by the I4C. Google, according to The Economic Times, has proposed sharing relevant information with the I4C as well.

Why the sudden movement?

The Supreme Court is the proximate cause. In ongoing proceedings, the court directed the government to strengthen mechanisms for detecting and removing such material. It also ruled that platforms must meet their reporting obligations under the Protection of Children from Sexual Offences (POCSO) Act. In October, the Centre asked the National Commission for Protection of Child Rights (NCPCR) to speed up development of an AI tool to detect CSAM online.

What does this change for Indian enforcement?

The tension is jurisdictional, and it is not trivial. The POCSO Act requires anyone aware of such offences to report them to Indian authorities. NCMEC's letter effectively asks India to rely instead on reports routed through a US-based organisation. India plainly has the right to set its own reporting process for offences under Indian law.

The open question is transparency. Nobody outside NCMEC knows precisely what information it shares with India, or how much of it Indian authorities actually use. MediaNama has sent NCMEC four questions and requested a copy of the November 6 letter:

• Indian authorities may need reports directly from platforms to act under Indian law — why should India not receive them directly for its own action?
• What does NCMEC share when a CyberTipline report has an India link: original images and videos, user and account details, IP addresses, its own analysis?
• How many of the 5.5 million reports reached Indian authorities in full, and how many have the I4C or Indian law enforcement actually accessed?
• What is the average lag between NCMEC receiving a report and sharing it, and how does the 52-hour average square with 77% shared within an hour?

That last discrepancy deserves an answer. A body citing one-hour sharing for more than three-quarters of its reports also reports a 52-hour average for India-linked material. Both figures can be true; the distribution matters.

NCMEC has not yet responded. Until it does, India must weigh a US legal obligation against its own statute — and decide whether one pipeline, routed through Alexandria, Virginia, counts as compliance in Delhi.