In a significant enforcement action, Reddit has been handed a hefty £14.47 million penalty by the UK’s Information Commissioner’s Office (ICO) for failing to adequately verify the ages of its users, which raised serious concerns about the safety of children on its platform. The ICO’s investigation revealed that the social media giant had not implemented sufficient measures to protect young users from exposure to inappropriate content, thereby violating data protection laws.
ICO’s Findings on Age Verification
The ICO’s investigation, which commenced in March 2023, highlighted that Reddit’s approach to age verification was fundamentally flawed. The regulator noted that the platform merely relied on users to self-report their age when creating accounts, a method described as “easily bypassed.” John Edwards, the UK Information Commissioner, expressed concern over Reddit’s negligence, stating, “It’s concerning that a company the size of Reddit failed in its legal duty to protect the personal information of UK children.”
Initially, Reddit stated that its policy did not require users to disclose their identities due to their commitment to privacy and safety. However, this stance proved inadequate when the ICO estimated that a considerable number of users under the age of 13 were active on the site, despite the platform’s terms of service expressly prohibiting such users.
Legislative Background and Compliance Challenges
The crackdown on Reddit’s practices is part of a broader effort by the UK government to enhance online safety for children through the Online Safety Act (OSA), which came into effect in July 2025. This legislation mandates stricter age verification protocols for platforms likely to be accessed by minors. In response to the OSA, Reddit has begun implementing age checks, limiting access to certain parts of its service for users who fail to verify their age.
Despite these measures, the ICO concluded that Reddit had processed children’s data without an appropriate legal basis, contravening the protections laid out in UK law. The ICO will continue to monitor Reddit’s age assurance controls as part of its ongoing commitment to safeguarding children online.
Broader Implications for Social Media Platforms
As Reddit grapples with this fine, the incident underscores a growing trend of regulatory scrutiny facing social media platforms. With Ofcom’s recent actions against various online services for inadequate age verification measures, experts suggest that the regulatory landscape is shifting. Matt Navarra, a social media specialist, remarked that the ICO and Ofcom’s efforts represent a “pincer movement” aimed at enforcing children’s data protection and designing safer online environments.
This evolution in regulatory oversight indicates that platforms like Reddit are increasingly being viewed as entities with significant responsibilities in safeguarding user data and protecting vulnerable audiences, rather than simply as forums for discussion.
Why it Matters
The implications of this fine extend far beyond Reddit; they signal a critical turning point in how social media platforms approach user safety, particularly concerning children. As regulatory bodies intensify their scrutiny, companies will need to reassess their data handling practices and age verification processes. The emphasis on accountability and transparency is likely to reshape the digital landscape, fostering a safer online environment for all users, particularly the youngest and most vulnerable.
