Reddit hit with $20 million UK data privacy fine over child safety failings

Britain’s privacy watchdog has imposed a substantial fine of 14.5 million pounds ($19.5 million) on Reddit for mishandling children’s personal information, highlighting increasing regulatory pressure on social media platforms regarding child safety.

The Information Commissioner’s Office (ICO) announced the penalty on Tuesday, stating that Reddit had unlawfully collected and used data from children under 13 years old. Information Commissioner John Edwards emphasized the severity of the situation, noting that children’s personal information was “collected and used in ways they could not understand, consent to or control,” potentially exposing them to inappropriate content.

“This is unacceptable and has resulted in today’s fine,” Edwards said in the announcement, underscoring the regulatory body’s commitment to protecting minors online.

The fine against Reddit represents part of a broader crackdown by UK authorities on digital platforms’ child safety measures. Earlier this month, the ICO fined MediaLab, owner of image-sharing platform Imgur, 247,590 pounds for similar violations. The regulator has also been conducting an ongoing investigation into TikTok since 2023, signaling heightened scrutiny across the social media landscape.

Central to the ICO’s complaint against Reddit was the platform’s inadequate age verification system. Although Reddit’s terms of service prohibit users under 13, the regulator found that the company had no effective mechanism to verify users’ ages before July 2023. This loophole allowed younger users to create accounts and access content potentially harmful to minors.

Commissioner Edwards stressed that online platforms likely to be accessed by children must take responsibility for protecting them from risks associated with data collection and usage. He specifically pointed to “effective age assurance measures” as a necessary safeguard.

Reddit did implement age verification protocols in July 2023, requiring users to declare their age during account creation, particularly before accessing mature content. However, the ICO dismissed this approach as insufficient, noting that simple self-declaration methods are easily circumvented by underage users. The watchdog has warned Reddit that it will continue monitoring the platform’s handling of children’s data.

In response to the fine, Reddit announced its intention to appeal the decision, defending its privacy-focused approach. “Reddit doesn’t require users to share information about their identities, regardless of age, because we are deeply committed to their privacy and safety,” the company stated. Reddit characterized the ICO’s demand for more personal information collection as “counterintuitive” and contrary to the company’s privacy principles.

This regulatory action reflects growing tensions between privacy regulators and social media companies over balancing user anonymity with child protection. While platforms like Reddit value minimal data collection and user privacy, regulators increasingly demand robust age verification systems that inherently require more personal information.

The case highlights the complex challenges facing social media companies operating in multiple jurisdictions with varying regulatory requirements. As governments worldwide strengthen online child protection laws, platforms must navigate between respecting user privacy and implementing sufficient safeguards for minors.

The substantial fine—nearly $20 million—signals that regulators are prepared to impose significant financial penalties on companies failing to meet child protection standards, potentially reshaping how social media platforms approach age verification and content access controls in the future.