atisusanti
John Edwards, the UK Information Commissioner, expressed serious concern over the situation, stating, "It’s concerning that a company the size of Reddit failed in its legal duty to protect the personal information of UK children." He emphasised the legal responsibility of online services likely to be accessed by children to safeguard them, which includes ensuring that data collection and usage do not expose them to risks. "To do this, they need to be confident they know the age of their users and have appropriate, effective age assurance measures in place," Edwards added. "Reddit failed to meet these expectations."
The ICO’s investigation revealed that Reddit’s primary method for determining user age was a self-declaration system upon account creation. The regulator deemed this approach insufficient and "easy to bypass," highlighting that despite Reddit’s terms of service prohibiting users under 13, estimates suggested a considerable number of children under this age were active on the platform. Consequently, the ICO concluded that Reddit had processed children’s data without a lawful basis. Under UK law, companies are mandated to exercise greater caution and implement specific actions when handling the data of child users, acknowledging their potentially lower awareness of the risks associated with data collection and usage. The ICO indicated that it would continue to monitor the situation and evaluate the age assurance controls Reddit has implemented since the investigation.
In its defence, Reddit stated that it "didn’t require users to share information about their identities, regardless of age, because we are deeply committed to their privacy and safety." A spokesperson for the company articulated their intention to appeal the decision, arguing that the ICO’s demand for more private information from every UK user was "counterintuitive and at odds with our strong belief in our users’ online privacy and safety." This stance underscores a fundamental disagreement between Reddit’s privacy-centric approach and the ICO’s regulatory focus on robust age verification for child protection.
The fine against Reddit comes at a time of increasing regulatory scrutiny for social media platforms operating in the UK. Reddit has experienced significant growth in the UK in recent years, with Ofcom identifying it as the 12th most visited website overall and the fourth most visited social media platform in 2025. Following the implementation of the Online Safety Act (OSA) age verification requirements in July 2025, Reddit took steps to restrict access for users who had not verified their age to certain adult content, including some profiles and subreddits.
The ICO is working closely with Ofcom, the regulator responsible for enforcing the OSA, to coordinate efforts aimed at protecting children and their data online. Ofcom has previously issued fines to several pornographic websites found to be lacking adequate age checks, which failed to prevent children from accessing adult material.
Social media expert Matt Navarra commented on the combined actions of the ICO and Ofcom, describing it as "the UK’s two regulator pincer movement coming into force." He explained, "You’ve got the ICO pushing children’s data and design expectations, and, in parallel, the UK’s wider online safety laws pushing the industry towards real age assurance as a baseline." Navarra further suggested that the fine levied against Reddit signifies a shift in how the platform is perceived and scrutinised by regulators. "Reddit is being treated less like a quirky forum site and more like what it is – a social platform with major platform responsibilities." This perspective highlights the evolving landscape of online regulation, where even platforms with a long history are being held to account for their impact on young users and their data. The ICO’s substantial fine serves as a clear signal that compliance with data protection laws, particularly concerning vulnerable age groups, is a non-negotiable requirement for online services. The outcome of Reddit’s appeal will likely be closely watched as it could set further precedents for age verification and data handling practices within the digital realm. The regulator’s continued monitoring of Reddit’s implemented age assurance controls suggests an ongoing commitment to ensuring the platform adequately protects its younger audience.
George Anjay
Ramos Leo
Roy Suryo
Nakalama John