Introduction
In Sri Lanka, online risks facing children are no longer an abstract concern. In 2024, the National Child Protection Authority (NCPA) recorded 151 complaints involving cyberbullying through threats using nude photographs, demonstrating the increasingly serious nature of online risks to children (NCPA, 2025). Sri Lanka CERT also recorded 20,033 social media related incidents in 2024, highlighting the wider scale of harmful activity within Sri Lanka’s digital environment (Sri Lanka CERT, 2025).
At the same time, the internet remains an important educational and developmental resource. A UNICEF-supported national study found that 46.3 per cent of child internet users had communicated online with people they did not know, while 27.9 per cent had subsequently met someone they had first encountered online (UNICEF Sri Lanka, 2018). The study also found significant gaps in children’s awareness of online privacy and safety. These findings demonstrate that Sri Lanka’s challenge is not to keep children away from the internet, but to ensure they can learn, communicate and participate digitally while being protected from cyberbullying, exploitation, harmful content and privacy violations.
The digital world: risk and opportunity
Digital technology provides children with valuable opportunities to learn, develop skills, express ideas, build confidence and connect with others around the world. Yet access to digital resources is not the same as being empowered by them. Children need to be able to detect misinformation and manipulation, protect personal information, communicate responsibly and identify harmful situations. At the same time, online environments can expose children to cyberbullying, inappropriate content, unwanted contact, exploitation and excessive social media use. Information you put out there can be available for years. Therefore, child online safety should be grounded in a rights based approach that protects children and promotes their rights to privacy, information, participation and freedom of expression (UNICEF, 2019).
Should children under 16 be banned from social media?
There is a major policy debate today about social media use by children under 16 years of age. Australia provides an example. From 10 December 2025, platforms with age restrictions cannot allow Australians under the age of 16 to create or maintain an account. However, this is not an internet ban as education; messaging and other digital services remain available (eSafety Commissioner, 2026). This distinction matters for Sri Lanka. Age limits are a part of safety measures, not all of the safety measures. The UK is targeting platform risks, algorithmic accountability and age assurance (Ofcom, 2026) and the EU is limiting targeted advertising on the basis of profiling children. Effective protection therefore demands a shared responsibility between platforms, parents and children.
The hidden power of algorithms
One of the problems in today’s digital world is that children do not always pick what they look at. Algorithms are now deciding which videos, posts, ads and suggestions show up on children’s screens. A child might first see content and then algorithms will keep sending similar or more exciting material. Because platforms want to keep users online for long as possible the attention of a child becomes a precious resource. This brings up a policy question: Should responsibility, for protecting children rest entirely on the child? The answer must be no.
Children’s cognitive and decision‑making capacities develop progressively throughout childhood and adolescence. Age alone cannot determine children’s ability to recognize manipulation assess risks or protect information. However children should not be treated as incapable of making decisions. Effective regulation should therefore combine age appropriate protection, with the development of autonomy and responsibility. Algorithms should be transparent harmful recommendation pathways restricted and platforms required to conduct child‑rights and safety assessments (UNICEF, 2024).
From child responsibility to shared responsibility
A major weakness in online safety approaches is putting most of the responsibility on children and parents. Even though children, parents and schools have roles, technology companies, internet service providers and governments also need to take part. Children need to learn how to use the internet think critically and behave responsibly online. Parents and those who care for children should offer advice talk openly and keep an eye on their activities in a way that's right for their age. Schools should teach about being a citizen online protecting privacy and staying safe on the internet. Technology companies should build safety into their products from the start. Offer ways for people to report problems. Internet service providers should help with child safety efforts. Governments should create rules, set standards and make sure they are followed. Groups in society and professional organizations can help by doing research raising awareness and checking on things independently. This way of sharing responsibility matches the guidance, from UNICEF (UNICEF, 2025).
The Sri Lankan context
Sri Lanka needs an online safety framework that fits Sri Lanka’s own social, cultural, educational and technological realities. Lessons can be learnt from Australia, the UK and EU, but Sri Lanka should develop a practical local approach. The digital divide continues to be a factor, with children in rural, estate and low income communities possibly having less access to devices and reliable internet. Parents are also different in digital literacy so supervision is not enough. Schools have a key role to play in helping children learn how to check information, protect personal data, identify scams and harmful content, report problems and act responsibly online. Cross border risks also complicate enforcement where harmful actors or platforms are based overseas. Therefore, Sri Lanka needs an inclusive framework combining regulation, education and shared responsibility among government, platforms, schools, parents, communities and children to ensure effective online protection.
Why this is also a national security issue
The protection of children in the environment should not be seen only as a social welfare or education matter. It is becoming more and more connected to security. A nation’s safety depends in part on how strong informed and united its people' are
There are five areas to consider. First information security means children must learn to tell information from false information, misleading content and deliberate disinformation. Second social cohesion can break down when online algorithms push views and widen divides between groups. Third data security is crucial because personal details of children can be used to profile them target them or harm them. Fourth human security involves protecting children from cyberbullying, exploitation, manipulation and abuse risks that UNICEF has identified as dangers in the digital world (UNICEF, 2024). Fifth digital resilience means building citizens who understand cyber threats and use tools wisely.
Protecting children now is not about their wellbeing. It is also an investment, in Sri Lankas national security. Strong aware and safe young people will help create a more secure society.
What should Sri Lanka do?
Sri Lanka would benefit from a Child Digital Safety and Digital Citizenship Framework, rather than mainly relying on prohibition. There should be several key pillars to the framework. First, roll out risk-based age assurance for high-risk services while safeguarding children’s privacy. Second, regulate the design of platforms and algorithms through risk assessments for child safety, transparency and safeguards against harmful content. Third, improve data protection for children, by applying privacy by design principles and clear rules on collection, processing and sharing of information. Fourth, incorporate digital citizenship in school curricula, such as misinformation, privacy, cyberbullying, scams, manipulation, reporting and responsible use of technology and AI. Fifth, offer national digital parenting programs. Sixth, put in place effective complaint and redress mechanisms. Finally, enhance multi agency oversight, while reducing digital inequality, particularly in rural, estate and disadvantaged communities.
The way forward: From restriction to resilience
The best thing you can do is not to build a wall between children and technology, but to build a safe digital space. With technology at the core of learning, communication and everyday life, Sri Lanka should enhance age assurance, platform accountability, algorithmic transparency, data protection, digital skills, parental guidance, school education, accessible complaints and independent regulation. Above all, the child must be at the heart of it all. Children have rights to protection, to be heard and to information. Policy should balance protection with opportunity, allowing children to learn, create, communicate and participate in safety. Ultimately, success should not be measured by limiting children’s access to technology, but by enabling them to use technology safely, wisely, ethically and responsibly. This will make the children stronger and also Sri Lanka’s future digital security.