Ethical Hacking News
The UK's Information Commissioner's Office has fined Reddit £14.47 million ($19.5 million) for failing to adequately protect the personal information of children under 13 who used its platform without proper age verification measures in place.
The UK's Information Commissioner's Office (ICO) has fined Reddit £14.47 million ($19.5 million) for failing to protect children's personal information.Reddit allowed children under 13 to access the platform without age verification measures, exposing them to inappropriate content.The ICO found that Reddit failed to conduct a data protection impact assessment (DPIA), which left users, especially minors, at risk.Reddit will implement new age verification measures, including requesting birth dates and verifying through third-party processes.
In a move aimed at strengthening online safety and protecting minors from inappropriate content, the UK's data protection regulator, the Information Commissioner's Office (ICO), has imposed a hefty fine of £14.47 million ($19.5 million) on the popular social media platform Reddit. The penalty is a direct result of the ICO's findings that Reddit failed to adequately protect the personal information of children under the age of 13, who were allowed to access and use the platform without sufficient age verification measures in place.
According to the ICO, Reddit's terms of service prohibited users under the age of 13 from accessing the platform, yet it was not until July 2025 that the company introduced an age assurance mechanism. This lack of effective age verification had significant implications for the platform, as it exposed children to inappropriate or harmful content that they could not understand, consent to, or control.
The ICO's investigation into Reddit's handling of minors' data was sparked by concerns raised about the platform's failure to conduct a data protection impact assessment (DPIA) on the risks associated with using children's data. A DPIA is a mandatory process that organizations must complete in order to comply with European data protection laws, including the UK's General Data Protection Regulation (UK GDPR). The ICO argued that Reddit's failure to undertake this necessary assessment left it potentially exposing users, particularly those under 13, to risks associated with their data.
The regulatory body emphasized that companies operating online services that are likely to be accessed by children have a responsibility to protect these minors by ensuring they are not exposed to risks through the way their data is used. To achieve this, organizations must be confident in their ability to verify the age of users and implement effective age assurance measures.
Reddit's response to the ICO's findings was characterized by its assertion that it does not require users to share information about their identities, regardless of age, as the company is deeply committed to the privacy and safety of its users. However, the platform acknowledged that it would be implementing new measures to prevent minors from accessing mature content, including requesting users' birth dates and verifying this information through third-party identity verification processes.
The implementation of these age verification measures is a significant development in the UK's efforts to enhance online safety and protect minors from inappropriate content. As the regulatory landscape surrounding data protection continues to evolve, it remains to be seen how Reddit and other social media platforms will adapt to meet the changing expectations of users and regulators alike.
In this context, it is essential for organizations operating in the digital sphere to understand their obligations under UK GDPR and to take proactive steps to ensure they are meeting these requirements. The ICO's findings serve as a stark reminder that companies must prioritize data protection when dealing with children's personal information, and that failure to do so can have severe consequences.
As the conversation around online safety continues to grow in importance, it is crucial for individuals, policymakers, and organizations alike to engage in open discussions about how we can work together to create a safer digital environment for all users.
Related Information:
https://www.ethicalhackingnews.com/articles/The-UKs-Stricter-Age-Verification-Regime-for-Social-Media-A-New-Era-of-Responsibility-ehn.shtml
https://go.theregister.com/feed/www.theregister.com/2026/02/24/ico_fines_reddit/
https://www.msn.com/en-us/news/technology/uk-data-watchdog-fines-reddit-1447m-for-letting-kids-slip-past-the-gate/ar-AA1WYk89
https://www.usatoday.com/story/tech/news/2025/03/03/tiktok-reddit-uk-investigation-children/81172600007/
Published: Tue Feb 24 08:36:10 2026 by llama3.2 3B Q4_K_M
