Children & Social Media in Pakistan: PTA's Admission, the Legal Gap & What Parents Can Do (2026)

Here is a sentence no regulator likes to say out loud in a courtroom. On 1 October 2026, before the Islamabad High Court, the Pakistan Telecommunication Authority admitted it does not have the legal power to stop children from using social media — or to make platforms verify their age. Not that it lacks the technology. Not that it lacks the staff. It lacks the law.

The hearing was about children's exposure to harmful content and digital addiction. Several petitions before the court had asked for tougher regulation — something like what Australia and the United Kingdom did: mandatory age verification, and restrictions on under-16s using social media platforms. PTA's answer was blunt. Under Section 37 of the Prevention of Electronic Crimes Act, 2016 (PECA 2016), the authority can only block or remove unlawful online content. The law gives it no power to regulate access based on age. None.

That admission affects millions of families. TikTok, Instagram, YouTube, Snapchat, Facebook — your children are almost certainly on at least one of them, and right now no Pakistani law keeps them off. This article explains what the law actually says, why the gap exists, and — because you cannot wait for Parliament — what you can do today to protect your child.

Quick Answer: What Did PTA Admit, and What Can Parents Do?

On 1 October 2026, PTA told the Islamabad High Court that PECA 2016 gives it no authority to enforce age verification or restrict under-16s on social media — only to block unlawful content under Section 37. A new law or a PECA amendment is needed. Until then, use device parental controls, in-app settings, school engagement, and the NCCIA helpline (1991).

What Exactly Did PTA Say Before the Islamabad High Court?

Let me lay out the facts as they were reported from that hearing, because precision matters here.

The case concerned children's exposure to harmful online content and digital addiction — petitions asking the court to push the state toward stricter regulation of social media for minors. The petitioners pointed to Australia and the UK, where governments have moved toward mandatory age verification and under-16 restrictions. They wanted something similar in Pakistan.

PTA's position, as disclosed in court, came down to a single legal point. The authority's powers over online content come from Section 37 of PECA 2016. That section lets PTA direct service providers to remove or block "unlawful online content" — content that falls within the categories the law defines as unlawful. Read the section carefully and you will find something striking: it says nothing about age. It does not mention children. It does not mention age verification. It does not authorise PTA to tell platforms "keep out the under-16s."

So PTA's argument was simple, and legally hard to dismiss: without an amendment to PECA 2016, or a new law passed by Parliament, the authority cannot restrict underage social media use. It can take down a specific harmful video. It cannot tell TikTok to keep twelve-year-olds off the platform.

The court, for its part, did not decide the matter that day. It sought further arguments on what kind of legal framework could protect children online while balancing digital rights. That means the question is alive — but as of today, there is no age-verification law in Pakistan. None.

What Does PECA Section 37 Actually Allow — and What Does It Not?

This is where most commentary goes fuzzy, so let me be precise. PECA 2016 is Pakistan's main cybercrime statute. Section 37 deals with "unlawful online content" and gives PTA the power to issue directions for removing or blocking such content through information systems.

The section lists the kinds of content that count as "unlawful" — broadly, content against the glory of Islam, the integrity, security or defence of Pakistan, public order, decency or morality, contempt of court, defamation, and incitement to offences, among other categories. The Removal and Blocking of Unlawful Online Content Rules, 2021, lay down the procedure. So the machinery is real: PTA can and does block content every year.

But here is the limitation, and it is decisive. Section 37 is a content-blocking power. It operates on the content, not the user. Nowhere does PECA give PTA the power to:

• require platforms to verify users' ages,
• set a minimum age for social media accounts,
• restrict under-16s from accessing platforms, or
• penalise platforms for allowing children on board.

The law simply never contemplated age as a basis for restricting access. Mere tajurbe me aksar parents mujh se poochte hain: "Toh PTA itna powerful hai, bachon ko kyun nahi rokta?" Yehi misunderstanding hai. Power hai — content ke khilaf. Age ke liye power hai hi nahi. Power jo law ne di nahi, wo court me defend nahi hoti.

The Legal Gap, in Plain Language

Let me put it in a table so it is unmistakable:

| What people assume PTA can do | What the law actually allows | |---|---| | Ban under-16s from social media | No power. PECA s.37 says nothing about age. | | Force platforms to verify age | No power. No age-verification mandate exists in Pakistani law. | | Block a harmful video or account | Yes. Unlawful online content under s.37 can be blocked or removed. | | Act against content targeting children | Partially. Specific offences like child pornography are criminalised under PECA (ss.21–22) and investigated by the NCCIA — but that is after the offence, not preventive age-gating. |

Notice the pattern. Everything PTA can do is reactive: something harmful appears, PTA can move against it. Nothing is preventive: there is no gate at the door of the platform. Your eleven-year-old can download TikTok in thirty seconds. The law has no opinion on that. That is the gap the Islamabad High Court is now being asked to think about.

And one more honest point: the court cannot create this power either. Courts interpret law; they do not legislate. Even if the IHC is sympathetic — and it clearly took the issue seriously by asking for further arguments — an age-verification regime would need Parliament to act: either amend PECA 2016 or pass a new child-online-safety law. Until that happens, the gap stays open.

A Real-Feel Example: The Mother in Lahore

Picture this. Shazia, a mother of three in DHA Lahore, borrows her eleven-year-old son Danish's phone to make a call. The lock screen shows notifications — TikTok likes, comments, a DM request from a stranger. She opens the app. He has 400 followers. Most are strangers. Some of the comments under his videos are crude; a couple are from adult accounts.

She panics. She deletes the app. Two days later, it is back — reinstalled from the Play Store in under a minute, new account created, same fake birth year. She calls PTA. She writes to the platform. She considers going to court.

Here is what I would tell Shazia, honestly: the law gives you almost nothing against the platform's age policy. The platforms' own terms require users to be 13 or older — but that is a private contract between the platform and the user, enforced (barely) by self-declaration of birth year. A child lies about his age, clicks through, and the platform has satisfied its own checkbox. PTA cannot make TikTok or Instagram do more, because no Pakistani law demands more.

What the law can do for Shazia is different: if a stranger sends obscene messages to her son, that is cyberstalking or harassment under PECA (ss.21, 24), and the NCCIA can investigate. If someone shares explicit content of a child, that is a serious offence under Section 22. The reactive machinery works. The preventive door is wide open. Both things are true at the same time — and a parent needs to understand both.

What Did Australia and the UK Actually Do? A Fair Contrast

The petitioners before the IHC pointed abroad, so let us look at what actually happened there — without romanticising it.

Australia went the furthest. Its Online Safety Amendment (Social Media Minimum Age) Act 2024 set a minimum age of 16 for accounts on certain social media platforms, with the obligations on platforms to take "reasonable steps" to prevent under-16s from having accounts. The law took effect in December 2025, and the penalties are severe — fines running into tens of millions of Australian dollars. This is real, hard age-gating: the platform bears the duty.

The United Kingdom took a different route. Its Age Appropriate Design Code (the "Children's Code," in force since 2021) requires online services likely to be accessed by children to design with children's best interests in mind — default high-privacy settings, no nudge techniques, and so on. Then the Online Safety Act 2023 added duties around age verification for pornographic content and stronger duties to assess and mitigate risks to children, with Ofcom as the enforcer.

Neither system is perfect. Australia's law faced heavy criticism over how age would actually be verified — the "privacy versus protection" fight is fierce, with digital ID proposals alarming privacy advocates. The UK's approach is more design-focused than ban-focused. But the contrast with Pakistan is stark: both countries gave their regulators an explicit statutory mandate. PTA has no equivalent mandate. That is the entire difference.

Why Can't PTA Just Copy Australia?

Because regulators cannot invent their own powers. This is a bedrock principle: a public authority can only do what the law authorises it to do. PTA is a creation of statute. Its powers are those written in PECA 2016 and the telecom laws. If it started ordering platforms to age-verify users tomorrow, any platform could walk into the Islamabad High Court and get that order struck down the same week — and it would win.

Aksar log ye ghalti karte hain — they assume the regulator is being lazy or cowardly. Sometimes that is true. Here, the reading of the law is straightforward, and PTA said so on the record. The fix is not a braver PTA. The fix is Parliament.

What would Parliament need to do? Either amend PECA 2016 to add an age-verification and minimum-age framework (with duties on platforms, verification methods, and penalties), or pass a dedicated child-online-protection statute — something like a "Children's Online Safety Act" — that assigns a regulator, defines the duties, and funds enforcement. Both are entirely possible. Neither has happened yet. And until it does, any "ban" you hear about on WhatsApp forwards is fiction.

What Can Parents Do Today? The Practical Toolkit

Enough about what the state cannot do. Here is what you can do — right now, this week — and honestly, some of it works better than any law would.

Lock the device, not just the app

The single most effective step is boring: parental controls at the device level. On Android, Google's Family Link lets you approve app downloads, set screen-time limits, filter content on Chrome and YouTube, and see weekly activity reports. On iPhones, Screen Time with a parent passcode does the same. These are free. They take twenty minutes to set up. Mere tajurbe me aksar parents ye step skip kar dete hain kyunki "bacha naraaz hoga." Hoga. Phir bhi karo.

Use the platforms' own parental tools

Every major platform now has parental supervision features — TikTok Family Pairing, Instagram's supervision tools, YouTube's supervised accounts for under-13s (YouTube Kids) and managed settings for teens. Are they perfect? No. A determined child with a second device can dodge them. But they change the default from "open door" to "door with a lock." Combined with device-level controls, they are meaningful.

Report harmful content the moment you see it

Do not just scroll past. Every platform has in-app reporting for content involving minors, harassment, or sexual content — and platforms act fastest on child-safety reports. In Pakistan, you also have the NCCIA helpline 1991 for cybercrime complaints, including online harassment, blackmail, and offences against children. File the complaint with screenshots, the account's username or URL, dates, and a short written account of what happened. The NCCIA investigates; where an offence under PECA is made out, the case proceeds. For a parent who discovers a stranger harassing their child online, this is the single most powerful tool the law gives you today.

Talk — the awkward conversation you keep postponing

Aksar parents ye ghalti karte hain: they treat a phone like a toy they handed over, and the conversation about it like something for "later." There is no later. Sit down. Ask what apps they use. Ask who they talk to. Tell them — in plain words — that anyone asking them to keep a conversation secret, asking for photos, or offering gifts for chats is a danger signal, and that they will never be in trouble for telling you. Children who can tell their parents are dramatically safer than children who cannot. No law, no app, no court order replaces this.

Engage the school — it takes two institutions

Schools see what parents do not: the group chats, the shared videos, the bullying threads. Which brings us to the second example.

A Second Example: The School in Islamabad

A private school in Islamabad's F-8 sector — let us call it Greenview Grammar (a generic name; no real school is being discussed) — discovered in September 2026 that a class-wide WhatsApp group of thirteen-year-olds had become a pipeline for cruel memes targeting one student, plus shared TikTok clips that were wildly inappropriate for their age. The principal's first instinct was to demand the group be shut down and to write to PTA.

The legal reality, as PTA itself has now confirmed, is that PTA cannot shut down children's access to the platform. So what can the school actually do? More than you might think — but through different tools:

• Its own disciplinary code. A school can prohibit phones during school hours, and can take disciplinary action for bullying or harassment that occurs between its students — including online conduct that affects the school environment. That power comes from the school's own rules and the parent-school contract, not from PTA.
• Counselling and parental engagement. The school can (and should) call the parents of the children involved, share what was found, and coordinate a response. In the Greenview example, a joint parent-teacher meeting with the school counsellor resolved the bullying faster than any legal route would have.
• Reporting to NCCIA where the line is crossed. If online conduct amounts to cyberstalking, harassment, or the sharing of obscene content involving minors (PECA ss.21, 22, 24), the school or parents can complain to the NCCIA helpline 1991. The law protects the child victim; it does not require the school to be a bystander.

The lesson: schools have real tools. They are just not PTA's tools. Confusing the two is why institutions feel helpless.

Can a Parent or a Platform Be Held Legally Responsible?

This is the question I get most often, and I want to answer it with complete honesty — including where the answer is "the law does not say."

Can a platform be punished for letting children use it? Under current Pakistani law, no — not for the mere fact of underage users. PECA's service-provider provisions (Section 35) give intermediaries conditional protection, and Section 37 lets PTA act against unlawful content. There is no provision that makes a platform liable for failing to verify age. If a platform ignores a lawful PTA direction to remove specific unlawful content, that is a different matter — but "allowing a twelve-year-old to open an account" is not, by itself, an offence under Pakistani law today.

Can parents be held liable for what their child does online? Here the law is largely silent. There is no Pakistani statute that says "a parent is criminally responsible if their child uses social media." If a child commits an offence through electronic means, general principles of criminal liability apply — and criminal liability is personal; it does not transfer to the parent. That said, parents can face consequences in other ways: civil claims where their negligence is arguable, or custody and guardianship proceedings where a court considers a child's welfare. I say this plainly because exaggerating parental liability helps no one: the law does not currently punish parents for their child's social media use. What the law does is give parents tools to act — NCCIA complaints, the courts, the school's disciplinary framework.

One caveat, and it matters: where the law is silent, outcomes depend on the facts and on counsel. If your situation involves real harm — blackmail, exploitation, serious harassment — do not rely on general articles. Consult a lawyer who practices cybercrime law.

What Might a Future Pakistani Law Look Like?

The IHC has asked for arguments on a legal framework. Parliament, if it moves, has working models to study. A sensible Pakistani child-online-safety law would probably need at least these elements:

1. A clear minimum age and defined duties on platforms — who must do what, and how "reasonable steps" to verify age are measured, without creating a surveillance database of every child's identity documents.
2. A designated enforcer with explicit powers — whether that is PTA with new statutory teeth or a new body; the mandate must be written in the law, not assumed.
3. Graduated penalties — fines that make non-compliance more expensive than compliance, scaled to platform size.
4. A complaints and redress channel for parents — fast, in Urdu as well as English, with defined timelines. Thirty days for a response is the kind of timeline that keeps trust; six months kills it.
5. Privacy safeguards — age verification that does not require every child to hand over CNIC-linked biometric data to foreign companies. This is the hard design problem Australia and the UK are still fighting over, and Pakistan would inherit it.
6. Coordination with the NCCIA — so that the preventive side (age-gating) and the reactive side (investigating offences against children) work as one system instead of two strangers.

Will Parliament act? I cannot predict that. What I can say is that the IHC hearing of 1 October 2026 has put the question on the national agenda in a way it was not before. Petitions are pending. Arguments are being sought. For parents, the honest position is this: hope for the law, but do not wait for it. The toolkit above works today.

Common Mistakes Parents Make

Mere tajurbe me aksar parents inhi ghaltiyon me phans jate hain. Har ek avoidable hai.

1. Deleting the app and declaring victory. The app reinstalls in a minute. Controls at the device level and the account level are what actually stick. App-deletion is theatre.
2. Handing over a phone with no conversation. A smartphone is the most powerful device your child owns and the least supervised. The day you hand it over is the day the conversation must happen — not "later."
3. Trusting the birth-year field. Platforms ask for a date of birth and accept whatever is typed. Your child typed 1998. Everyone's child typed 1998. This is not verification; it is decoration.
4. Assuming PTA or the platform will protect your child. As this article has shown, PTA has no age-gating power, and platforms optimise for engagement. Protection starts at home — that is not a slogan, it is the legal reality.
5. Waiting for "proof" before acting. Parents often wait until something bad clearly happens before setting controls or talking to the child. By then, the stranger has been chatting for weeks. Act on the risk, not on the damage.
6. Not documenting. When something harmful does happen — a harassing message, a blackmail threat — parents panic and delete everything. Do not. Screenshot with timestamps, save URLs and usernames, then report. The NCCIA cannot investigate what you have deleted.
7. Ignoring the school's role. The school sees the group chats you never will. Build the relationship with teachers and counsellors before there is a crisis.

Practical Checklist for Parents

Print this. Stick it on the fridge. Seriously.

• [ ] This weekend: Set up Google Family Link (Android) or Screen Time with a parent passcode (iPhone) on your child's device. Budget 20–30 minutes.
• [ ] This weekend: Enable TikTok Family Pairing / Instagram supervision / YouTube supervised settings on the accounts your child uses.
• [ ] This week: Have the conversation — apps, contacts, the "keep it secret" danger signal, and the promise: you will never be in trouble for telling me.
• [ ] This month: Check the activity reports once. Not to spy — to know.
• [ ] Ongoing: Know the reporting routes by heart — in-app report buttons, and the NCCIA helpline 1991 for cybercrime complaints.
• [ ] If something bad happens: Screenshot everything with timestamps, note usernames and URLs, do not delete, and file a complaint with the NCCIA. Consult a cybercrime lawyer if the matter is serious.
• [ ] School: Ask your child's school what its policy on phones and online bullying is — and who the counsellor is.
• [ ] Watch the law: The IHC proceedings may lead somewhere. If a new age-verification law comes, read what it actually requires of platforms — and of you.

Frequently Asked Questions

Is there an age limit for social media in Pakistan?

No. There is currently no Pakistani law setting a minimum age for social media accounts, and PTA confirmed before the Islamabad High Court on 1 October 2026 that it has no power to enforce one. Platforms' own terms usually require users to be 13+, but that is enforced only by self-declared birth dates, which children routinely bypass.

What did PTA actually admit before the Islamabad High Court?

PTA disclosed that under Section 37 of PECA 2016 it is authorised only to block or remove unlawful online content. The law does not grant it power to stop children from using social media or to enforce mandatory age verification. PTA's position: without a PECA amendment or a new law from Parliament, it cannot restrict underage social media use.

Can PTA block TikTok or Instagram for allowing children?

Not on age grounds. PTA can act against specific unlawful content under Section 37, but it cannot order a platform to keep children off, because no law gives it that power. A platform that ignores a lawful content-removal direction is a different case — but underage access alone is not currently an offence for the platform.

What should I do if a stranger contacts my child online?

Screenshot everything with timestamps — messages, profile, username or URL. Do not delete the conversation. Block the account after preserving evidence, and file a complaint with the NCCIA helpline 1991. If the conduct involves threats, blackmail, or sexual content, treat it as urgent and consult a cybercrime lawyer immediately.

Can I complain to the NCCIA about online harassment of my child?

Yes. The NCCIA (helpline 1991) investigates cybercrime under PECA 2016, including cyberstalking (Section 24), harassment, blackmail, and offences involving minors (Sections 21–22). File with screenshots, dates, usernames or URLs, and a short written account. Keep copies of everything you submit.

Are parents legally responsible if their child misuses social media?

Pakistani law is silent on this specific question — no statute makes parents criminally liable for their child's social media use, and criminal liability is personal. But parents are not powerless: courts consider child welfare in custody matters, and parents have every tool — device controls, reporting, NCCIA complaints. For serious situations, get legal advice on your facts.

What did Australia do about under-16s on social media?

Australia passed the Online Safety Amendment (Social Media Minimum Age) Act 2024, setting 16 as the minimum age for accounts on certain platforms, with platforms required to take reasonable steps to prevent under-16 accounts. It took effect in December 2025, with very large fines for non-compliance. It remains controversial over how age is verified without mass surveillance.

What is the UK's approach to children's online safety?

The UK combines the Age Appropriate Design Code (2021) — requiring services likely to be accessed by children to default to high privacy — with the Online Safety Act 2023, which imposes duties on platforms to assess and mitigate risks to children and to age-verify for certain content, enforced by Ofcom. It is design-focused rather than a flat under-16 ban.

Will Pakistan get an age-verification law?

Unknown. The Islamabad High Court sought further arguments on what legal framework could protect children while balancing digital rights, and petitions are pending. Any regime would need Parliament to amend PECA 2016 or pass new legislation. Until that happens, parents should rely on the practical tools in this article rather than wait.

Where can I read more about Pakistan's cybercrime law?

Our detailed guide on cybercrime offences under PECA 2016 covers every section discussed here — including Sections 21, 22, 24 and 37 — and our walkthrough of filing a cybercrime complaint explains the NCCIA process step by step, with the documents you should prepare.

A Final Word

The 1 October 2026 hearing did something valuable: it forced an honest admission into the public record. Pakistan's regulator cannot do what many parents assume it can. That is uncomfortable — but it is also clarifying. The gap is real, the law is what it is, and the waiting room of Parliament is not where your child's safety lives.

Your child's safety lives in your home: in the controls you set this weekend, in the conversation you have this week, in the school relationship you build this month, and in the NCCIA helpline number — 1991 — saved in your own phone. Laws may come. Do not wait for them.

This article is general legal information, not legal advice. Cybercrime law is fact-specific — if your child has been harmed online, consult a practicing cybercrime lawyer in your city.