Researcher: Smriti Ranabhat

Editor: Siddhartha Guvaju

 Privacy Breach of Children in the Age of Viral Content

A video of three schoolchildren walking to school in the rain in Rolpa went viral nationwide. Soon after, content creators, businesses and even government agencies reused the children’s images for promotional and awareness campaigns without obtaining meaningful consent. The lack of free, prior and informed consent exposed children to the risk of their digital footprints being misused through privacy breaches, cyberbullying, identity theft and AI misuse. Following public criticism, Nepal Telecom removed its promotional post. 

The viral spread of the video and the subsequent use of the children’s images spotlights growing concerns about children’s privacy and the ethical use of their images online. Viral content should never come at the expense of a child’s rights. Even when the intention is positive, using children’s images without consent can expose them to cyberbullying, exploitation and unwanted public attention. Therefore, children deserve stronger privacy protections in the digital space. Public institutions, businesses and content creators must adopt clear practices for obtaining free, prior and informed consent and use children’s images responsibly. 

Offline Continuum of Technology Facilitated Gender Based Violence

Digital platforms are increasingly being used to harm women, and this harm often extends into offline spaces. Our media monitoring of July has shown how digital platforms can amplify harassment, humiliation and abuse, often with devastating consequences for victims. After a viral video circulated online that purportedly showed her being publicly humiliated, a 13-year-old girl in Bara committed suicide. According to her family, the online dissemination of the video contributed to the incident. This shows how the non-consensual sharing of harmful content can result in devastating harm, particularly when children are involved. 

Furthermore, the non-consensual sharing of intimate images has emerged as a serious form of gender-based digital violence. It causes lasting psychological, social and reputational harm. In Gorkha, a 19-year-old woman accused her ex-boyfriend that he used the password she had shared during their relationship to access her Facebook account and shared her intimate photos and videos to her family after they split. Similarly, in Dhanusha, two men were charged with allegedly stealing and circulating a married woman’s private photos without her consent.

These incidents illustrate how perpetrators exploit trust, shared passwords and access to personal devices to facilitate digital abuse. They also reflect unequal power dynamics and deeply entrenched patriarchal norms that make women disproportionately vulnerable to technology-facilitated gender based violence. While our existing legal framework provides a basis for prosecuting such offences, stronger legal and institutional mechanisms are needed to explicitly recognize image-based sexual abuse, ensure the rapid removal of non-consensually shared intimate content and provide survivor-centred support services.

Sexual Harassment in Educational Institutions Exposed Through Social Media

Students’ confessions of sexual harassment at Sukuna Secondary School have drawn national attention to the need for safer learning environments. Schools should be places where students feel secure, respected and able to learn without fear.  Students and alumni of Sukuna Secondary School turned to social media to share anonymous testimonies, chat screenshots and audio recordings alleging sexual harassment by teachers and staff. The allegations included inappropriate messages, requests for intimate photos, sexual remarks, unwanted touching and claims that earlier complaints had been ignored. Following the disclosures, the school suspended three staff members and police arrested two teachers and a bus driver. The case highlights the growing role of digital platforms in enabling survivors to speak out when institutional reporting mechanisms fail. While social media helped bring the allegations to public attention, it should not become the primary pathway to justice. Survivors should be able to report abuse safely through trusted and confidential channels without having to rely on public disclosure. 

Social Media Fueling Communal Clash in Nepal

The recent unrest in Sunsari and the proliferation of misinformation on social media show how false narratives can fuel communal tensions and threaten social harmony. During periods of disruption, a flood of misinformation, disinformation, AI-generated images and old videos shared out of context can spread rapidly and inflame public sentiment. A viral video claiming to show protesters burning a police van in Sunsari was found to be misleading. Fact-checkers confirmed that the footage was actually from the 2025 Gen Z movement in Rautahat and had been recirculated in a false context. Similarly, a viral claim that 24 Rohingya Muslims had been arrested in Kathmandu was debunked. Another widely shared video falsely portrayed armed Muslims gathering during the unrest, when it actually showed the Daha (Tazia) festival in Rautahat, where participants traditionally carry ceremonial weapons such as sticks, swords, spears and khukuris.

In response, authorities appealed to the public to remain calm and maintain social harmony. The Press Council Nepal also directed media outlets and social media accounts to remove content that allegedly incited religious tension and referred some cases to the Cyber Bureau.

The incident illustrates how misinformation is increasingly being used to exploit religious and ethnic sensitivities. AI-generated images, out-of-context videos and false narratives can rapidly fuel polarization, making fact-checking and timely public communication essential during times of crisis. Authorities should respond quickly with verified information while ensuring that those who deliberately spread harmful disinformation are held accountable through due process.

Online Scams, Financial Fraud and Evolving Cybercrime

In July, we observed a sharp rise in online scams, financial fraud, cybercrime and other forms of digital harm. Cybercriminals are increasingly exploiting AI, trusted brands, major sporting events and digital platforms to deceive users and expand the scale of their operations.

Ahead of the 2026 FIFA World Cup, AI-generated deepfake advertisements misused the logo of Nepal Police and uniform to promote illegal betting platforms. Similarly, several gambling websites falsely claimed affiliation with eSewa to gain public trust. Although online betting is prohibited in Nepal and authorities continue to block such websites, these platforms frequently reappear under new domains.

Law enforcement agencies also uncovered several organized cybercrime networks. Nepal Police arrested suspects involved in illegal online betting and cryptocurrency trading. In Pokhara, police dismantled an online travel scam that defrauded victims through fake tour packages and fraudulent employment offers. These episodes highlight that cybercrime is becoming more sophisticated, organized and technology-driven. Strengthening cybersecurity and improving digital investigations are critical to tackling these evolving threats. At the same time, greater public awareness, critical digital literacy, platform accountability and investment in AI-enabled fraud detection will be essential to protect users from advanced forms of cybercrime.

Status of Digital Governance and Cybersecurity in Nepal 

In July, our media monitoring identified several weaknesses in Nepal’s government digital infrastructure and cybersecurity. As more public services move online, secure and reliable digital systems are essential to protect personal data, maintain public trust, and ensure uninterrupted access to essential services, but in reality, the opposite has been the case. 

The website of Nepal Telecommunications Authority (NTA) displayed a “Not Secure” warning due to SSL/TLS certificate issues. Similar concerns surround the mandatory National ID (NID) system, where technical failures, inconsistent records, and security lapses have prevented some citizens from accessing essential services. These incidents highlight the risks of making digital identity mandatory before the underlying systems are reliable and secure.

Cybersecurity challenges are also evident in the government owned education sector. Tribhuvan University’s MBS exam paper was leaked on WhatsApp within minutes of the examination. Similarly, Padma Kanya Multiple Campus exposed the personal data of more than 1,300 students through publicly accessible documents. These incidents show the need for stronger cybersecurity, better data protection practices, regular security audits, and greater institutional accountability to build trust in Nepal’s growing digital ecosystem.

Amid these challenges, the Supreme Court issued important orders to strengthen accountability and protect fundamental rights in the digital age. It ordered the introduction of audio-video recording of suspect interrogations, prioritizing serious criminal cases, to prevent torture and improve the credibility of investigations. The Court also prohibited the live streaming of court hearings where the party requests confidentiality or privacy. This order is made to address the gap until clear broadcasting guidelines are in place and the court further directed that livestream footage must not be edited or misleadingly shared on digital platforms. Therefore, we need to strengthen cybersecurity, data protection, digital governance and institutional accountability. The expansion of digital services must be accompanied by robust safeguards that protect citizens’ rights and promote trust among citizens. 

Increasing Regulatory Oversight of the Digital Space

Nepal is working towards expanding digital public services across banking, transport, governance and law enforcement. The proposed Science, Technology and Innovation Bill symbolizes the intention to regulate emerging technologies like artificial intelligence and cybersecurity in Nepal. Similarly, the plan to establish an Anti-Cyber Scam Cell reflects the growing complexity of online fraud and other cyber-enabled crimes. These initiatives point towards an opportunity to strengthen digital governance.

The government is also expanding online public services through the Industrial Management Information System and the digitization of tax incentive programmes. These reforms can improve service delivery but for this, they must be accessible to disadvantaged groups like people with limited digital skills, internet access or disabilities. Nepal has further attempted to regulate the digital space through the National Advertising Policy 2026. The policy regulates social media advertising, influencer marketing, AI-generated content, deepfakes and sponsored content. 

Similarly, the Code of Conduct for Civil Servants, 2083 sets standards for the online conduct of public officials. This seems to be a good step towards maintaining privacy and confidentiality of the required nature of government work. However, there should not be restrictions on online expression of civil servants and policy must be consistent with the fundamental right to freedom of expression. These developments are a result of government’s growing regulatory oversight of the digital space. As digital governance evolves, a balanced approach to digital rights is crucial. So, every law and policy must protect privacy, ensure inclusive access and uphold fundamental rights.

Are we Ready for AI Data Centres? 

Artificial intelligence is becoming a strategic priority for Nepal. The UAE has expressed interest in collaborating on AI, data centres and digital infrastructure. The government has also announced plans to establish the first Sovereign AI Compute Centre of Nepal. With abundant hydropower, a relatively cool climate and a strategic location, Nepal could become an attractive destination for AI infrastructure. However, gaps in digital infrastructure, cybersecurity, legal frameworks and reliable energy remain significant challenges. Large-scale AI investments need to be supported by strong data protection laws, transparent governance and independent environmental and social impact assessments to ensure that local communities, particularly indigenous Peoples, are not adversely affected.

At the same time, AI infrastructure raises broader sustainability and governance concerns. Large AI data centres consume significant amounts of electricity, water and computing resources. Also, international experience shows that they can place considerable pressure on local infrastructure and ecosystems. As a geographically small and environmentally sensitive country that is home to diverse indigenous communities, Nepal should carefully assess whether the environmental and social costs of hosting large-scale AI infrastructure are proportionate to the expected public benefits. As Nepal advances its AI agenda, balancing innovation with sustainability, human rights and environmental protection will be essential to ensuring AI delivers long-term public value.

References: