UK data watchdog fines Reddit £14.47M for letting kids slip past the gate
The Register
February 24, 2026
AI-Generated Deep Dive Summary
The UK's Information Commissioner's Office (ICO) has fined Reddit £14.47 million ($19.5 million) for failing to protect children's data on its platform. The regulator found that despite prohibiting users under 13 from accessing the site, Reddit lacked an age verification system until July 2025 and had not conducted a mandatory Data Protection Impact Assessment (DPIA) prior to January 2025. This left children exposed to inappropriate content and data processing without proper safeguards.
The ICO argued that Reddit's failure to implement adequate age assurance measures and conduct the required risk assessments violated UK GDPR, exposing young users to potential harm. John Edwards, the UK Information Commissioner, emphasized that companies targeting minors must prioritize protecting their privacy and safety by ensuring they have effective age verification systems in place.
In response, Reddit rejected the ICO's demands to collect additional user data, citing its commitment to privacy and safety. The platform stated it now requires users accessing mature content to provide birth dates and undergo third-party identity verification through Persona, a service backed by Peter Thiel. However, this move has raised concerns due to reports that Persona engages in extensive surveillance, leading Discord to sever ties with the company.
The fine reflects the ICO's growing focus on enforcing data protection laws under the Online Safety Act, particularly when it comes to platforms popular among children. The regulator has been proactive in addressing non-compliance since new rules took effect in July 2025, signaling a tougher stance on age-related risks in online services.
This case highlights the importance of balancing privacy rights with regulatory obligations, especially for global tech companies operating in the UK. It underscores the need for platforms to implement robust age verification measures and conduct thorough DPIAs to comply with data protection laws while safeguarding minors from potential harms.
Verticals
tech
Originally published on The Register on 2/24/2026