India's Ministry of Electronics and Information Technology (MeitY) has issued a notice to Meta over Child Sexual Exploitative and Abuse Material (CSEAM) appearing in paid Instagram advertisements, ordering the company to remove or disable the ads and demanding a written explanation within seven days The Hindu.

The notice follows a BBC investigation published in the days prior, which found that Instagram was serving ads promoting child sexual abuse material to users BBC. That reporting appears to have been the proximate trigger for MeitY's action, though the ministry's notice frames the matter as a statutory compliance issue rather than a response to press coverage alone.

The seven-day window for Meta's explanation is procedurally significant. Under India's intermediary liability framework, platforms that fail to act expeditiously on government or court orders to remove unlawful content risk losing the safe-harbour protections that shield them from liability for user-generated content. A notice of this kind — demanding both removal and a documented explanation — sets up a compliance clock that Meta will need to satisfy to avoid escalation, whether through further regulatory notices, referral to law enforcement, or scrutiny from India's Computer Emergency Response Team.

What makes this case distinct from routine content-moderation disputes is the advertising vector. CSEAM surfacing in organic posts or reels is a persistent, well-documented enforcement challenge across platforms. CSEAM surfacing in paid ads is a different order of problem: it implies the material passed through Meta's ad-review pipeline, which is supposed to screen creative content, targeting parameters, and advertiser identity before a placement goes live. Ads are monetised, trackable transactions with billing records, payment identifiers, and advertiser account histories attached — all of which ordinarily make paid placements easier to trace and harder to plausibly attribute to moderation gaps at scale.

Meta's own Advertising Standards explicitly prohibit ads containing content that sexually exploits or endangers children, and the company states that it reports apparent child exploitation to relevant authorities when it becomes aware of it Meta. Neither of the two contemporaneous news sources cites a substantive public response from Meta addressing the specific ads identified by the BBC, and Meta had not, as of the most recent reporting, disclosed enforcement actions tied to this matter.

The broader context here concerns the durability of ad-review systems at platform scale. Meta processes an enormous volume of ad submissions daily across markets, relying heavily on automated classifiers supplemented by human review for flagged content. CSAM detection tools such as PhotoDNA and hash-matching databases are designed to catch known imagery, but ads using coded language, adult decoys, or novel imagery not yet in reference hash sets can evade automated screens. If the BBC's findings hold up to scrutiny, they suggest either a detection gap in Meta's classifiers or a failure in the human-review layer that is supposed to catch what automation misses — a distinction that matters for what kind of remedy MeitY will ultimately accept as sufficient.

India is not a jurisdiction where Meta can treat this lightly. It is Meta's largest user base globally, and the government has shown a willingness in past cycles to use IT Rules compliance mechanisms as leverage across a range of disputes, from misinformation to data localisation to content takedowns tied to public order. A CSEAM-in-ads finding lands in a different, less politically contestable category than most of those prior frictions: there is essentially no defensible position from any government or civil-society constituency in favour of tolerance here, which gives MeitY unusually broad latitude to escalate without the pushback that accompanies speech-related takedown orders.

What happens next depends on Meta's seven-day response. A credible accounting — identifying the ads, the advertisers, the gap in review, and remedial steps — would likely settle the matter administratively. A response seen as evasive or incomplete could prompt referral to law enforcement agencies, additional regulatory notices, or public disclosure of the ministry's underlying findings, which have not yet been made public in detail. Given the subject matter, any of those paths carries reputational stakes for Meta well beyond the regulatory penalty itself.