The UK ICO says it is investigating how TikTok uses 13 to 17-year-olds' personal data for content suggestions, and how Reddit and Imgur verify child users' ages
The watchdog said it is probing how ByteDance's short-form video-sharing platform TikTok uses 13-17-year-olds' personal information to suggest content in their feed.
Context & Ripple Effects
This inquiry extends a long-running UK scrutiny of TikTok's treatment of young users, including the ICO's earlier £12.7M penalty over under-13 users' data. It also places Reddit and Imgur's age-verification practices under the same child-data lens.
The scope separates two linked controls: TikTok's use of teen data in recommendation systems and platforms' ability to establish whether a user is a child. That focus builds on the UK's earlier privacy investigation into TikTok's young users.
First-order effects
- TikTok must account to the ICO for how its recommendations use the personal data of 13- to 17-year-olds; Reddit and Imgur face scrutiny of their child-age checks.
- The investigation puts youth-data handling and age-assurance controls at the center of regulatory risk for the named platforms.
Second-order effects
- Product, privacy, and trust-and-safety teams may need to document how age signals, consent, and recommendation inputs interact, rather than treating moderation and personalization as separate compliance functions.
- Other social platforms serving UK minors have a clearer incentive to test whether their age-verification processes and youth recommendation practices can withstand similar regulator questions.
Third-order effects
- If this enforcement pattern persists, UK platform oversight will increasingly evaluate the full chain from age determination to data-driven content delivery, not simply whether underage accounts are removed.
- That could make robust age assurance a prerequisite for operating personalized youth experiences, though the eventual standard will depend on the ICO's findings and any enforcement outcome.
The trend: Child-safety regulation is moving from penalties for discrete data failures toward scrutiny of the systems that identify young users and shape their feeds.