Supreme Court Judgment on APAAR ID: Overview
The question of whether a nationwide student database scheme, marketed as "voluntary," can be enforced without a genuine right to refuse is at the heart of one of 2026's most significant student-privacy rulings. The case, Abhishek Baxi v. Union of India, arose after parents of CBSE-affiliated students challenged the APAAR ID scheme, arguing it functioned as a form of state surveillance enabling long-term tracking of children without meaningful consent.
Decided by the Supreme Court on 25 July 2026, the judgment builds directly on an Orissa High Court ruling from December 2025 and extends its consent-form safeguards to CBSE schools across India. This page explains the judgment, the framework it operates within, and its practical impact on parents, students and schools.
What Was the Case About?
In August 2025, the CBSE announced that APAAR (Automated Permanent Academic Account Registry) ID — a unique academic identifier intended to consolidate a student's educational records across their schooling life — would effectively become mandatory for students in Classes IX to XII appearing for board examinations from 2026 onward. The scheme's enrollment process linked to Aadhaar, and parents in several States objected that the consent form provided no clear way to refuse enrollment, making a scheme described as "voluntary" effectively compulsory. In Odisha, parent Rohit Anand Das challenged this before the Orissa High Court, which on 12 December 2025 held that the absence of an opt-out mechanism violated students' right to privacy and directed the inclusion of a refusal clause within two months. Advocate Paras Nath Singh, represented by Senior Advocate Indira Jaising, then approached the Supreme Court seeking to extend these safeguards nationwide and to address the scheme's broader constitutionality.
The Main Legal Question
The central issues were whether the APAAR scheme's consent mechanism met the standard required for genuinely voluntary participation, whether its data-collection practices and potential linkage to Aadhaar for minors were consistent with the constitutional right to privacy and the Supreme Court's 2018 Aadhaar ruling, and whether nationwide safeguards were needed beyond the Orissa High Court's State-specific order.
Key Directions and Observations (Judgment Dated 25 July 2026)
The following is a structured, plain-English summary of what the Supreme Court held and the safeguards it put in place.
Consent Form Must Include a Genuine Opt-Out/Refusal Option
The Court directed the Centre and CBSE to amend the model APAAR consent form so that parents and guardians can clearly and meaningfully refuse enrollment, holding that a scheme described as voluntary must actually function that way.
Orissa High Court's Safeguards Extended Pan-India
The consent-form and privacy safeguards laid down by the Orissa High Court in Rohit Anand Das v. State of Odisha are now to be implemented by CBSE and affiliated schools across the country, not just in Odisha.
Strict Compliance with the DPDP Act, 2023 Required
All collection, processing, storage and retention of student data under APAAR must strictly comply with the Digital Personal Data Protection Act, 2023, including its heightened protections for children's personal data.
Third-Party Data Sharing Restricted
The Court restricted the disclosure or sharing of student personal information collected under APAAR with private entities or other third parties, except where specifically and legally authorised.
Relevant Legal Framework
Several constitutional provisions and statutes together govern how student data can be collected and used under schemes like APAAR. Understanding which framework applies to your situation is often the first step in getting the right advice.
| Article 21, Constitution of India | Guarantees the right to life and personal liberty, interpreted to include the right to privacy — the constitutional foundation for challenging APAAR's consent and data-sharing practices. |
|---|---|
| K.S. Puttaswamy v. Union of India (2017) 10 SCC 1 | The nine-judge Bench ruling that declared privacy a fundamental right under Article 21, establishing the proportionality test applied to assess state data-collection schemes like APAAR. |
| K.S. Puttaswamy (Aadhaar-5J.) v. Union of India (2018) 1 SCC 809 | Upheld the Aadhaar Act's constitutional validity but struck down mandatory Aadhaar linkage for school admissions and certain private services, and required parental consent plus an exit option for minors' Aadhaar enrollment. |
| Digital Personal Data Protection Act, 2023 | Requires verifiable parental consent for processing a child's personal data and imposes data-fiduciary obligations on entities collecting such data, now expressly applicable to APAAR's data practices. |
| Rohit Anand Das v. State of Odisha, 2025 SCC OnLine Ori 4535 (Orissa HC) | The foundational ruling directing inclusion of an opt-out/refusal clause in the APAAR consent form, now extended nationwide by the Supreme Court. |
| CBSE APAAR Scheme Guidelines (2025) | The administrative framework under which APAAR enrollment was rolled out for Class IX-XII students, now required to be read subject to the Supreme Court's consent and data-protection directions. |
Timeline of Important Court Proceedings
Privacy Declared a Fundamental Right
A nine-judge Bench in K.S. Puttaswamy v. Union of India holds that the right to privacy is a fundamental right under Article 21, laying the constitutional groundwork for later challenges to data-collection schemes.
Supreme Court Restricts Mandatory Aadhaar Linkage
In its Aadhaar judgment, the Supreme Court strikes down mandatory Aadhaar linkage for school admissions and requires parental consent and an exit option for minors' Aadhaar enrollment.
CBSE Announces APAAR ID for Board Exam Students
CBSE announces that APAAR ID will effectively become mandatory for Class IX-XII students appearing for board examinations from 2026, with an enrollment process linked to Aadhaar.
Orissa High Court Orders a Refusal Clause
The Orissa High Court, in Rohit Anand Das v. State of Odisha, holds that the absence of an opt-out mechanism made the "voluntary" scheme effectively mandatory, and directs inclusion of a refusal clause within two months.
Supreme Court Decides Abhishek Baxi v. Union of India
The Supreme Court extends the Orissa High Court's consent-form safeguards nationwide, mandates DPDP Act, 2023 compliance, and restricts third-party sharing of student data collected under APAAR.
Nationwide Rollout of Revised Consent Forms
As of September 2026, CBSE and schools are implementing the court-directed changes within the two-month compliance window, with parents entitled to a genuine opt-out option that does not affect their child's board exam registration.
What Does This Judgment Mean in Practice?
For Students & Parents/Guardians
You now have a clear, enforceable right to refuse APAAR ID enrollment for your child without it affecting board exam registration, and greater assurance that data you do share will not be passed to private third parties without legal authorisation.
For Schools & CBSE
Schools must reissue consent forms with a genuine, clearly presented opt-out option, train staff to honour refusals without penalising students, and ensure APAAR-related data handling complies with the DPDP Act, 2023.
For State Education Departments & Other Boards
While the judgment directly addresses CBSE, other State boards and education departments running similar student-ID or data-collection schemes should expect similar consent and data-protection standards to be expected of them going forward.
For EdTech & Third-Party Service Providers
Entities that previously received or sought access to APAAR-linked student data for scholarships, recruitment or other purposes must now operate within the Court's restrictions on third-party sharing and demonstrate lawful authorisation for any data access.
Guidance for Parents/Guardians and for Schools/Education Boards
This judgment affects different people differently — from a parent deciding whether to enroll their child in APAAR, to a school administrator responsible for implementing the revised consent process correctly. What you should do next depends on which situation applies to you.
If You Are a Parent or Guardian of a CBSE Student
- Check whether your child's school has issued a revised APAAR consent form with a clear opt-out/refusal option, as required by the Supreme Court's July 2026 judgment.
- If you wish to decline APAAR enrollment, submit your refusal in writing and keep a copy — schools cannot condition board exam registration on APAAR enrollment.
- If you have already consented but wish to reconsider, raise the issue with the school and ask about the process for withdrawal or correction of already-submitted data.
- Ask the school how your child's APAAR-linked data is stored, and whether it has been or will be shared with any third party, given the Court's restrictions on such sharing.
- If your school insists APAAR is compulsory or refuses to honour a refusal, consult a lawyer about escalating the matter, since this would run contrary to the Supreme Court's directions.
If You Represent a School or Education Board
- Update your APAAR consent forms without delay to include a clear, meaningful opt-out/refusal option, in line with the Supreme Court's directions and the court-mandated two-month compliance window.
- Ensure board exam registration and other academic processes are not conditioned on APAAR enrollment for students or parents who choose to opt out.
- Review your data-handling practices for APAAR-linked information against the Digital Personal Data Protection Act, 2023, including consent, storage and retention requirements for children's data.
- Audit any existing arrangements involving sharing of student data with third parties, and discontinue or restructure any that are not clearly legally authorised.
- Train front-line administrative staff to correctly explain and process opt-out requests, to avoid disputes and potential liability for non-compliance.
Does This Judgment Apply to Your Situation?
Whether this ruling directly helps your case depends on whether your child's school falls within CBSE or a board applying similar standards, and on the nature of your specific concern — consent, data sharing, or enrollment pressure.
Read the Original Supreme Court Judgment
Wherever possible, refer to the original court record for the exact operative directions rather than relying solely on editorial summaries — including this one.
📄 Visit Supreme Court of India WebsiteRelated / Landmark Cases on Student Data Privacy
These judgments form the broader legal backdrop against which the APAAR ID dispute was decided in India. This is general legal information — always have a lawyer confirm how a precedent applies to your specific facts.
Abhishek Baxi v. Union of India
The Supreme Court directed the Centre and CBSE to build a genuine opt-out option into the APAAR consent form nationwide, mandated DPDP Act compliance, and restricted third-party sharing of student data.
Rohit Anand Das v. State of Odisha
Held that the absence of an opt-out mechanism in the APAAR consent form made the scheme effectively mandatory and violated students' right to privacy, directing inclusion of a refusal clause within two months.
K.S. Puttaswamy v. Union of India (Right to Privacy)
A nine-judge Bench unanimously held that the right to privacy is a fundamental right under Article 21, protected against unjustified State intrusion, including through data-collection schemes.
K.S. Puttaswamy (Aadhaar-5J.) v. Union of India
Upheld the Aadhaar Act's constitutional validity but struck down mandatory Aadhaar linkage for school admissions and certain services, and required parental consent and an exit option for minors' Aadhaar enrollment.
DPDP Act's Protections for Children's Personal Data
Requires verifiable parental consent before processing a child's personal data and imposes data-fiduciary obligations on entities like CBSE that collect such data through schemes like APAAR.