Reddit Fined £14.47 Million by UK Regulator for Children’s Privacy Failures
The UK Information Commissioner's Office (ICO) has imposed a £14.47 million ($19.52 million) fine on Reddit, Inc. This penalty follows an investigation that concluded Reddit unlawfully processed the personal data of children under the age of 13 by…
The UK Information Commissioner's Office (ICO) has imposed a £14.47 million ($19.52 million) fine on Reddit, Inc. This penalty follows an investigation that concluded Reddit unlawfully processed the personal data of children under the age of 13 by failing to implement effective age verification controls.
Despite Reddit's terms of service prohibiting use by children under 13, no age assurance mechanisms were introduced until July 2025. The ICO found Reddit lacked a lawful basis under UK data protection law to process underage users' data during this period.
The regulator also identified Reddit's failure to conduct a mandatory Data Protection Impact Assessment (DPIA) before January 2025, despite the presence of users aged 13 to 18 on the platform.
Reddit’s Response and Age Assurance Measures
In July 2025, Reddit implemented age verification measures, requiring users to declare their age during account creation. However, the ICO noted that self-declaration could be easily bypassed and continues to monitor Reddit's data processing practices.
The UK Information Commissioner's Office (ICO) has imposed a £14.47 million ($19.52 million) fine on Reddit, Inc.
Reddit has expressed disagreement with the ICO's stance, arguing that the requirement to collect more private information contradicts its commitment to user privacy. The company plans to appeal the decision.
The ICO's fine against Reddit is its largest in relation to children's privacy. It follows a previous fine of £247,590 against MediaLab.AI, Inc. for similar violations, leading to Imgur's withdrawal from the UK market.
The ICO is actively investigating 17 other platforms, including Discord, Pinterest, and X, addressing concerns with Meta and Snapchat over children's location data use. By October 2025, the ICO's enforcement actions have positively impacted over 3 million children across various platforms.
The penalty reflects the ICO's commitment to enforcing the Age Appropriate Design Code and signals that self-declaration of age is insufficient for legal compliance with data protection obligations on platforms accessible to minors.
Based on reporting by Cyber Security News.
