The UK ICO fines Reddit £14.47M for unlawfully using children's personal information; Reddit began verifying user ages in July 2025 to comply with the UK OSA
Reddit has been fined £14.47m by the UK's data watchdog for unlawfully using children's personal information.
Context & Ripple Effects
The penalty closes a regulatory arc that began with the ICO’s 2025 inquiry into Reddit’s child-age checks and followed Reddit’s move to age-gate certain mature content for UK users. It makes the adequacy of age assurance, rather than its mere presence, central to the company’s UK data practices.
The action also sits alongside the ICO’s earlier fine against TikTok over children’s data, showing that youth-data enforcement is reaching large consumer platforms with different product models.
First-order effects
- Reddit faces a £14.47M financial penalty and increased scrutiny of how it identifies child users and uses their personal information in the UK.
- The company’s July 2025 age-verification rollout becomes part of a broader compliance posture; limiting access to mature content alone does not resolve the data-protection issues identified by the ICO.
Second-order effects
- Social and community platforms serving UK users will need to test whether their age-assurance flows and downstream data uses meet both safety and privacy obligations, not treat them as separate controls.
- Age-verification providers and product teams face pressure to offer safeguards that minimize data collection while reliably supporting age-based access rules.
Third-order effects
- If enforcement continues, UK platform compliance is likely to converge around integrated consent and age-assurance systems that govern collection, recommendation, and access by user age.
- The resulting trade-off—stronger proof of age versus collection of additional sensitive data—will keep privacy-preserving age assurance a central design and regulatory challenge.
The trend: UK child-safety rules are driving platforms toward age-aware product controls whose data practices must withstand privacy enforcement as well as content-safety oversight.