Reddit's £14.5m Fine Exposes Widespread Child Data Exploitation
UK regulator delivers largest-ever children's privacy penalty as hundreds of thousands of under-13s were left vulnerable to harmful content
The UK's data protection watchdog has delivered a devastating blow to Reddit, imposing a £14.47 million fine for systematically exploiting the personal data of children under 13 and exposing them to potentially harmful content. The penalty represents the largest fine ever issued for breaching children's privacy rights, signaling the severity of Reddit's failures.
The Information Commissioner's Office (ICO) investigation revealed a troubling reality: despite Reddit's own terms of service explicitly prohibiting users under 13, the platform operated without any robust age verification system until July 2025. This glaring oversight meant hundreds of thousands of UK children were essentially "hidden in plain sight," having their personal information collected and processed without legal justification.
"It's concerning that a company the size of Reddit failed in its legal duty to protect the personal information of UK children," Information Commissioner John Edwards stated. "Children under 13 had their personal information collected and used in ways they could not understand, consent to or control."
The investigation exposed fundamental regulatory failures that persisted for years. Reddit failed to conduct a mandatory Data Protection Impact Assessment until January 2025, despite UK law requiring companies to assess and mitigate risks to children before launching services likely to be accessed by them. This assessment should have been completed years earlier, leaving children vulnerable throughout Reddit's operation in the UK.
Even Reddit's belated attempts at reform appear inadequate. While the platform introduced age verification measures in July 2025, including checks for mature content access, the ICO remains critical of the company's continued reliance on self-declaration for new accounts. Regulators warned that simply asking users to declare their age poses ongoing risks to children "as it is easy to bypass".
The implications extend far beyond financial penalties. The ICO's findings suggest that a significant number of underage children were using the platform and potentially exposed to harmful content they should never have encountered. This exposure occurred while Reddit collected and processed their personal data for commercial purposes, creating a double violation of children's rights and safety.
This landmark case sets a concerning precedent about how major tech platforms have operated with apparent disregard for children's digital safety. The fact that Reddit, a platform valued in billions, operated for years without basic age verification while knowingly processing children's data raises serious questions about industry-wide practices and the effectiveness of existing oversight mechanisms.
Sources
Some links may be affiliate links. See our privacy policy for details.