Reddit hit with $20 million UK data privacy fine over child safety failings

LONDON — Britain’s Information Commissioner’s Office (ICO) has imposed a substantial £14.5 million ($19.5 million) penalty against social media platform Reddit for serious breaches in children’s data protection protocols. The regulatory action, announced Tuesday, marks the latest escalation in the UK’s intensified scrutiny of digital platforms concerning child safety measures.

The investigation revealed that Reddit’s inadequate age verification systems enabled children under 13 to access the platform and have their personal information processed unlawfully. Information Commissioner John Edwards stated that these systemic failures resulted in minors being exposed to inappropriate content without proper understanding or consent mechanisms.

Despite Reddit’s policy prohibiting users under 13, the platform lacked effective age assurance measures until July 2025. The ICO criticized Reddit’s subsequent implementation of ‘self-declaration’ age verification as fundamentally insufficient and easily circumvented. Regulatory officials confirmed they would continue monitoring the platform’s handling of children’s data.

This enforcement action follows similar recent penalties against digital platforms. Earlier this month, MediaLab—owner of image-sharing service Imgur—received a £247,590 fine for comparable violations. The ICO has also maintained an ongoing investigation into TikTok’s child data practices since last year.

Reddit has announced its intention to appeal the decision, asserting that the ICO’s demands conflict with the company’s privacy-first approach. In an official statement, Reddit emphasized: ‘Our commitment to user privacy means we don’t require identity sharing regardless of age. The ICO’s insistence on collecting more private information from UK users contradicts our fundamental principles of online safety and privacy protection.’

The case highlights growing tensions between regulatory bodies seeking enhanced child protection measures and technology companies advocating for minimal data collection practices.