In a significant move signalling increased regulatory scrutiny, Reddit has been hit with a fine of £14.47 million by the UK’s Information Commissioner’s Office (ICO) for its inadequate measures to verify the ages of its users. The ICO’s investigation revealed that the platform failed to safeguard the personal information of children, potentially exposing them to harmful content online. This ruling underscores an evolving landscape of accountability for social media platforms, particularly concerning the protection of younger audiences.
Age Verification Failures
The ICO’s findings indicate that between 5 May 2018 and 8 July 2025, Reddit unlawfully processed personal data of children under the age of 13. John Edwards, the UK Information Commissioner, expressed his concern regarding Reddit’s failure to fulfil its legal obligations to protect vulnerable users. “It’s concerning that a company the size of Reddit failed in its legal duty to protect the personal information of UK children,” he stated.
Despite claiming a commitment to user privacy, Reddit’s current approach to age verification — merely asking users to self-declare their age upon account creation — was deemed insufficient and easily exploitable. The ICO emphasised that platforms interacting with children must implement robust age assurance measures to mitigate risks linked to the collection and usage of their data.
Compliance with the Online Safety Act
Reddit commenced its age verification processes on 8 July 2025 in an effort to align with the recently mandated requirements of the Online Safety Act (OSA). However, the ICO noted that merely asking users to declare their age does not meet the necessary standards for protecting children from inappropriate content. The platform’s inability to enforce stringent verification methods has raised alarms about its user demographics, with the ICO’s estimates suggesting a notable presence of underage users on the site.
The ICO’s investigation into Reddit began in March alongside probes into TikTok and Imgur, illustrating a broader initiative to regulate child data usage across popular platforms. Following the introduction of the OSA, Reddit has restricted access to certain parts of its site for users who have not verified their ages, including sections likely to contain adult material.
Implications for Social Media Regulation
As Reddit navigates this regulatory landscape, the ICO’s ruling represents a pivotal shift in how the platform is perceived by authorities. Social media expert Matt Navarra commented on this transition, noting that Reddit is increasingly viewed as a platform with significant responsibilities, rather than simply a quirky forum. “The fine marks a turning point in how Reddit is scrutinised by regulators,” he remarked, highlighting the intensifying pressures on social media companies to comply with safety regulations.
This fine is not an isolated incident; it reflects a growing trend among regulators to enforce stricter compliance measures across the industry. Ofcom, which oversees the enforcement of the OSA, has also taken action against adult content providers failing to implement appropriate age verification systems, demonstrating a concerted effort to protect children online.
Why it Matters
The recent fine imposed on Reddit not only serves as a warning to the platform but also signals a broader shift in the regulatory environment surrounding social media and online safety. As the UK intensifies its efforts to safeguard children from harmful content, platforms will need to adopt more rigorous data protection measures. Failure to do so could result in severe financial penalties and reputational damage. This case highlights the imperative for social media companies to prioritise child safety and reinforces the growing expectation for accountability in the digital sphere.
