The UK’s data protection regulator has fined Reddit £14.47 million for unlawfully processing children’s personal information and failing to implement effective age verification measures.
The penalty was imposed by the Information Commissioner’s Office (ICO), which said the platform did not adequately check users’ ages, exposing children to potential risks, including inappropriate content.
ICO cites long-term compliance failures
According to the ICO, the failures occurred between May 5, 2018, and July 8, 2025. During this period, the regulator concluded that Reddit processed the data of children under 13 without a lawful basis.
Under UK law, companies offering services likely to be accessed by children must ensure robust safeguards are in place. The ICO said simply asking users to declare their age when opening an account was “easy to bypass” and did not amount to effective age assurance.
UK Information Commissioner John Edwards described it as “concerning that a company the size of Reddit failed in its legal duty to protect the personal information of UK children.”
Reddit to appeal decision
Reddit stated that it historically did not require users to share identity details to preserve privacy, adding that it has since introduced age verification measures to comply with the Online Safety Act 2023.
The company said it intends to appeal the decision, arguing that the regulator’s approach could require more data collection from users, which it believes conflicts with privacy principles.
The ICO said it would continue monitoring Reddit’s updated controls and work closely with Ofcom, which enforces online safety requirements.
The fine reflects growing regulatory scrutiny of major social media platforms in the UK, particularly regarding children’s data protection and online safety standards.