Reddit has been fined over Ā£14 million by the UK's Information Commissioner's Office for failing to adequately protect children's privacy on its platform.
Reddit has been fined over Ā£14 million by the Information Commissioner's Office (ICO) for serious failings in safeguarding children's data privacy. The ICO's investigation revealed that Reddit did not implement adequate age verification checks, which allowed children under the age of 13 to access the platform without proper controls. Such lapses not only expose vulnerable young users to potential risks but also indicate a broader issue in how large tech companies manage and protect sensitive personal information.
The ICO identified several specific shortcomings in Reddit's approach to data privacy concerning minors. Notably, the company failed to use any robust age assurance mechanisms, meaning it lacked a lawful basis for processing the data of users under 13 years old. Additionally, the ICO noted that Reddit did not conduct a Data Protection Impact Assessment (DPIA) to identify and address the risks associated with children's data prior to January 2025, further demonstrating its negligence in safeguarding young users' information.
John Edwards, the UK Information Commissioner, expressed significant concern over Reddit's failure to fulfill its legal duties to protect children's personal information. His remarks underscore the importance of accountability for tech companies, especially regarding their responsibilities in ensuring the safety and privacy of minors online. This incident highlights the ongoing scrutiny of social media platforms and the potential legal ramifications they face for lapses in data protection, especially pertaining to children's safety and privacy rights.
