Reddit fined $20 million in UK over children’s data protection failures

15:00

By: Sahili Aya

Reddit fined $20 million in UK over children’s data protection failures

Britain’s data protection authority has fined U.S.-based platform Reddit £14.47 million (approximately $20 million) for violations related to children’s personal data, citing inadequate age verification and unlawful data processing.

The penalty was imposed by the Information Commissioner's Office (ICO), which concluded that the company failed to implement effective mechanisms to verify users’ ages. Although Reddit’s terms prohibit children under 13 from accessing the platform, regulators said meaningful age checks were not introduced until mid-2025.

According to the ICO, a significant number of underage users were able to create accounts and have their personal information processed without sufficient safeguards. UK Information Commissioner John Edwards stated that minors may have been exposed to content inappropriate for their age and that their data was collected in ways they could not reasonably understand or consent to.

The watchdog also found that Reddit had not completed a required data protection impact assessment regarding children’s information until early 2025, despite allowing teenagers aged 13 to 17 to use the service.

Reddit announced it would appeal the decision, arguing that it does not require users to disclose sensitive identity information and that broader data collection could undermine privacy principles. The company maintained that its approach seeks to balance user safety with minimal data retention.

The ruling comes amid growing debate in the United Kingdom over stricter controls on minors’ access to social media. The government of Prime Minister Keir Starmer has launched consultations on potential measures, including age-based restrictions and limits on certain design features considered addictive.

Globally, several governments have introduced or proposed tighter digital safeguards for young users, reflecting mounting concerns about online safety, mental health, and data protection. The UK case underscores increasing regulatory scrutiny of technology companies operating across international markets.