The UK data protection regulator has fined Reddit £14.47 million after finding serious failings in the platform’s handling of children’s personal data.
The penalty imposed by the Information Commissioner’s Office (ICO) follows an investigation that concluded Reddit had failed to implement robust age protection mechanisms and had no lawful basis for processing the data of children under 13.
Under UK data protection law, children’s information must be given special protection. The ICO said Reddit did not have effective age verification systems in place for users until July 2025, despite its terms of service prohibiting minors under 13 from accessing the platform.
The regulator also found that Reddit had not conducted a Data Protection Impact Assessment (DPIA) on risks to children until January 2025, even though users aged 13 to 18 were allowed to participate.
John Edwards, Britain’s information commissioner, described the failures as unacceptable. “Children under the age of 13 had their personal information collected and used in ways they did not understand, consent to or control,” he said. “It is not enough to rely on users to self-report their age when children could be at risk.”
In July 2025, Reddit introduced new measures including age verification for access to adult content and requiring users to provide their age when creating an account. However, the ICO warns that self-declaration alone carries risks as it can be easily circumvented.
The regulator said it would continue to monitor Reddit’s approach as part of broader enforcement efforts focused on online platforms that rely primarily on self-declared age limits.
The fine takes into account the number of children potentially affected, the duration of the violations, and Reddit’s global revenue.
The ICO’s actions follow its ongoing monitoring of platforms under the UK’s Age Appropriate Design Code, also known as the Children’s Code, which sets standards for services likely to be accessed by minors under 18.
The regulator has said protecting children’s privacy online remains a priority and confirmed it will continue to work closely with Ofcom, which enforces the Online Safety Act, to ensure coordinated oversight of digital platforms.
The decision highlights the increasing scrutiny of technology companies operating in the UK, particularly around age verification and the lawful processing of children’s data.
