Kerala unveils Cyber Safety Protocol to safeguard students in AI era

In a significant advancement towards enhancing digital safety for students, the state of Kerala has introduced the 'Cyber Safety Protocol 2026'. This initiative, spearheaded by the Kerala Infrastructure and Technology for Education (KITE), aims to create a secure digital learning environment amid the complexities introduced by Artificial Intelligence (AI) and cyber threats. The protocol is designed to provide comprehensive guidelines for schools, educators, parents, and students, addressing the pressing need for awareness and critical thinking in the face of emerging digital challenges.

The Cyber Safety Protocol 2026 emerges from a thorough analysis of the challenges posed by AI-driven technologies and the increasing prevalence of cybercrimes. KITE, the technology arm of the General Education Department of Kerala, has crafted this framework to align with current legal standards while offering targeted directives to various stakeholders within the educational ecosystem. KITE's CEO, K Anvar Sadath, highlighted that the initiative encompasses 13 core objectives. These objectives include raising awareness about the risks associated with sharing confidential data with Generative AI, fostering critical thinking regarding digital content, and identifying misinformation, all of which are crucial in nurturing responsible digital citizenship among students.

The protocol delineates nine operational areas that cover a wide range of topics, from the integration of AI in academic settings to the management of administrative data and the maintenance of secure online learning environments. To ensure effective implementation, school leaders are assigned 17 specific mandates. These include ensuring that internet access during school hours is supervised by teachers and establishing dedicated School Cyber Security Committees, each led by a designated Coordinator. Such measures are intended to create a structured approach to managing digital safety in schools.

A key aspect of the protocol is its emphasis on student privacy. It mandates the adoption of 'Privacy by Design' principles, which specifically discourage the use of real-time CCTV monitoring via private servers in classrooms. This approach reflects a growing recognition of the importance of safeguarding student privacy in an increasingly digital world. Additionally, to address the digital divide, educators are instructed to avoid assigning home tasks that require internet access, instead providing school-based resources for students who lack access to online programs.

The protocol also sets forth strict guidelines regarding the use of online data in educational contexts. It prohibits the use of unverified online information during instruction and restricts the collection of sensitive student data through social media platforms. For students, the protocol outlines 25 essential safety guidelines, which include recognizing suspicious links, safeguarding live locations and private information on social media, and managing permissions for cameras and chats in online gaming environments. Parents are provided with 16 actionable guidelines that focus on managing screen time, understanding the implications of digital footprints, and utilizing monitoring tools such as Family Link.

To bolster these initiatives, KITE offers specialized Cyber Security and AI literacy programs aimed at families, thereby fostering a collaborative approach to digital safety. The protocol integrates protections from existing legal frameworks, including the IT Act 2000, DPDP Act 2023, and POCSO Act, while also incorporating amendments to IT rules set for 2026 that specifically address Synthetically Generated Information (SGI). Furthermore, it details 11 general safety measures, such as implementing two-factor authentication and secure downloading practices, along with a clear roadmap for reporting grievances.

The protocol also identifies 20 major cyber threats, including deepfakes, AI grooming, and the concept of 'digital arrest', providing both legal context and precautionary measures to mitigate these risks. Sadath noted that this protocol represents a strategic extension of the 'Sarvam AI Mayam' training initiative, which has already reached six lakh parents this year. The ongoing training sessions and cyber safety clinics will further support the educational community in navigating the complexities of digital safety.

Why it matters

The introduction of the Cyber Safety Protocol 2026 is a critical step for Kerala in addressing the unique challenges that arise from the integration of AI in education. By establishing a comprehensive framework that emphasizes awareness, critical thinking, and responsible digital citizenship, the protocol aims to empower students, educators, and parents alike. This initiative not only seeks to protect students from potential cyber threats but also fosters a culture of digital literacy that is essential in today's technology-driven landscape.

For creators and technologists, this protocol highlights the importance of developing educational tools and resources that align with these safety standards. As AI continues to evolve and permeate various aspects of education, understanding and adhering to such protocols will be crucial for ensuring the safe and effective use of technology in learning environments. The emphasis on privacy, critical thinking, and informed digital citizenship reflects a growing recognition of the need for responsible engagement with technology, which is a vital consideration for anyone involved in the creation of digital content and educational resources.