UK ICO fines Reddit $19 million for unlawful collection of children's data
Summary
Hide ▲
Show ▼
The UK Information Commissioner's Office (ICO) has fined Reddit £14.47 million ($19.5 million) for collecting and using personal data of children under 13 without adequate safeguards. The ICO found that Reddit lacked meaningful age-verification systems until July 2025, despite its terms prohibiting underage users. The regulator estimates significant numbers of underage children used the platform, exposing them to harmful content. Reddit has announced plans to appeal the decision. The ICO also criticized Reddit for failing to carry out a data protection impact assessment (DPIA) to assess and mitigate risks to children on the platform before January 2025. Reddit introduced age verification for accessing mature content in July 2025, but the ICO noted that the age verification process is too easy to bypass.
Timeline
-
24.02.2026 16:54 2 articles · 1d ago
UK ICO fines Reddit $19 million for unlawful collection of children's data
The UK Information Commissioner's Office (ICO) fined Reddit £14.47 million ($19.5 million) for collecting and using personal data of children under 13 without adequate safeguards. The ICO found that Reddit lacked meaningful age-verification systems until July 2025, despite its terms prohibiting underage users. The regulator estimates significant numbers of underage children used the platform, exposing them to harmful content. Reddit has announced plans to appeal the decision. The ICO also criticized Reddit for failing to carry out a data protection impact assessment (DPIA) to assess and mitigate risks to children on the platform before January 2025. Reddit introduced age verification for accessing mature content in July 2025, but the ICO noted that the age verification process is too easy to bypass.
Show sources
- UK fines Reddit $19 million for using children’s data unlawfully — www.bleepingcomputer.com — 24.02.2026 16:54
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
Information Snippets
-
Reddit was fined £14.47 million ($19.5 million) by the UK ICO for unlawfully collecting and using data of children under 13.
First reported: 24.02.2026 16:542 sources, 2 articlesShow sources
- UK fines Reddit $19 million for using children’s data unlawfully — www.bleepingcomputer.com — 24.02.2026 16:54
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Reddit lacked meaningful age-verification systems until July 2025, despite prohibiting underage users in its terms of service.
First reported: 24.02.2026 16:542 sources, 2 articlesShow sources
- UK fines Reddit $19 million for using children’s data unlawfully — www.bleepingcomputer.com — 24.02.2026 16:54
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
The ICO estimates significant numbers of underage children used Reddit before July 2025, exposing them to harmful content.
First reported: 24.02.2026 16:542 sources, 2 articlesShow sources
- UK fines Reddit $19 million for using children’s data unlawfully — www.bleepingcomputer.com — 24.02.2026 16:54
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Reddit implemented age assurance measures in July 2025, but the ICO criticized them for not meeting UK data protection standards.
First reported: 24.02.2026 16:542 sources, 2 articlesShow sources
- UK fines Reddit $19 million for using children’s data unlawfully — www.bleepingcomputer.com — 24.02.2026 16:54
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Reddit plans to appeal the ICO's decision, arguing that the vast majority of its UK users are adults.
First reported: 24.02.2026 16:542 sources, 2 articlesShow sources
- UK fines Reddit $19 million for using children’s data unlawfully — www.bleepingcomputer.com — 24.02.2026 16:54
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
The ICO fined Reddit for failing to carry out a data protection impact assessment (DPIA) to assess and mitigate risks to children on the platform before January 2025.
First reported: 25.02.2026 11:401 source, 1 articleShow sources
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Reddit introduced age verification for accessing mature content in July 2025, but the ICO noted that the age verification process is too easy to bypass.
First reported: 25.02.2026 11:401 source, 1 articleShow sources
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Reddit defended its decision, stating that it did not require users to share information about their identities, regardless of age, because it is deeply committed to their privacy and safety.
First reported: 25.02.2026 11:401 source, 1 articleShow sources
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Experts argued that mandatory identity verification places an undue burden of proof on users and potentially exposes user data.
First reported: 25.02.2026 11:401 source, 1 articleShow sources
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
-
Chris Linnell, associate director of data privacy at Bridewell, argued that a DPIA is a statutory requirement designed to force organizations to properly assess, document, and mitigate risk before harm occurs.
First reported: 25.02.2026 11:401 source, 1 articleShow sources
- ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns — www.infosecurity-magazine.com — 25.02.2026 11:40
Similar Happenings
OpenAI introduces age prediction model for ChatGPT to enforce age restrictions
OpenAI has rolled out an age prediction model for ChatGPT to detect users' ages and enforce safety-related restrictions. The model analyzes user behavior and interaction times to determine if the user is an adult or a teenager. This feature aims to prevent minors from accessing adult or potentially harmful content without parental consent. Users flagged as under 18 will face restrictions on topics like violence, extreme beauty standards, and unhealthy dieting. Adults mistakenly flagged as teens can verify their age through a process involving a live selfie and government ID.
FTC sues Sendit for illegal collection of children's data and deceptive practices
The Federal Trade Commission (FTC) has filed a lawsuit against Iconic Hearts Holdings Inc., the operator of the Sendit app, and its CEO, Hunter Rice, for allegedly collecting personal data from children under 13 without parental consent. The lawsuit also alleges deceptive practices related to the app's subscription services. Sendit is a social media companion app popular among teenagers, with over 25 million users. The FTC's investigation found that Sendit collected personal data from 116,000 users under the age of 13 in 2022, violating the Children’s Online Privacy Protection Act (COPPA). The app also deceived users by generating fake anonymous messages and misrepresenting the benefits of its premium Diamond Membership. The FTC alleges that these practices violate the FTC Act and the Restore Online Shoppers’ Confidence Act (ROSCA). The lawsuit seeks to address these alleged violations and protect consumers, particularly minors.