In a significant regulatory move, Reddit has been penalised £14.47 million by the UK’s Information Commissioner’s Office (ICO) for its inadequate measures in safeguarding the personal information of child users. The ICO’s investigation revealed that the platform failed to conduct proper age verification procedures, exposing minors to potentially harmful content. This ruling not only underscores the heightened scrutiny on social media platforms but also raises critical questions about their responsibilities in protecting younger audiences.
ICO’s Findings: A Call for Accountability
The ICO determined that between 5 May 2018 and 8 July 2025, Reddit unlawfully processed the personal information of children under 13 years of age. The regulator expressed particular concern over Reddit’s failure to implement effective age assurance methods, which are essential for preventing minors from accessing inappropriate material. John Edwards, the UK Information Commissioner, stated, “It’s concerning that a company the size of Reddit failed in its legal duty to protect the personal information of UK children.”
In response, Reddit has defended its practices, asserting that it does not require users to disclose their identities, citing a commitment to user privacy. However, the ICO’s findings suggest a significant gap between Reddit’s stated policies and the reality of user data management. While the platform began age verification processes in July 2025 in compliance with the Online Safety Act (OSA), the ICO noted that simply asking users to declare their age is insufficient, as this method is easily circumvented.
Regulatory Landscape and Broader Implications
The scrutiny of Reddit is part of a larger trend within the UK regulatory framework aimed at protecting children online. The ICO initiated its investigation in March alongside inquiries into TikTok and Imgur, focusing on their handling of children’s data. This concerted effort by regulators signals a shift in how social media platforms are perceived and held accountable.
The OSA requires platforms likely to be accessed by children to implement robust age verification measures. As part of this initiative, Reddit has restricted access to certain parts of its service for users who have not validated their age, including user profiles and subreddits with adult content. This approach aligns with the ICO’s expectations for online safety but leaves room for improvement in implementation.
Industry Reactions and Future Considerations
Social media expert Matt Navarra highlighted the implications of the ICO’s actions, noting that this fine reflects a pivotal moment for Reddit’s standing among regulators. “Reddit is being treated less like a quirky forum site and more like what it is—a social platform with major platform responsibilities,” he remarked.
The ICO’s ongoing collaboration with Ofcom, the authority enforcing the OSA, suggests a unified regulatory front aimed at ensuring that children’s data is adequately protected across digital platforms. Recent fines imposed on adult content sites for failing to enforce age checks further exemplify the regulatory landscape’s tightening grip on data protection.
Reddit has indicated its intention to appeal the fine, arguing that the ICO’s request for increased data collection contradicts its commitment to user privacy. This stance, however, may not resonate well with regulators keen on ensuring that platforms take their responsibilities seriously.
Why it Matters
The £14 million fine against Reddit serves as a critical reminder of the responsibilities that come with operating in the digital space, particularly concerning the protection of vulnerable users such as children. As regulators intensify their scrutiny on social media platforms, companies must adopt more comprehensive age assurance measures and prioritise user safety. This case could set a precedent for how similar platforms manage children’s data, ultimately shaping the future of online interactions and safety standards in the UK and beyond.
