The United Kingdom’s data protection authority has imposed a £20 million fine on social platform Reddit Inc. for breaching privacy laws relating to age verification and the collection of personal data. The penalty follows an investigation into Reddit’s handling of user information and its failure to comply with legal requirements for protecting children’s privacy.
The Information Commissioner’s Office (ICO) said Reddit failed to implement adequate age checks to prevent children from accessing age-restricted content and did not meet data protection standards when collecting and processing personal information. The regulator determined that Reddit’s age verification processes were insufficient to ensure that younger users were accurately identified and protected under UK law.
The ICO also found that Reddit collected personal data without providing clear information to users about how that data would be used. The regulator said it took issue with Reddit’s use of certain data collection practices that lacked transparency and did not respect individuals’ rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As a result, Reddit was deemed to have breached multiple provisions of these privacy laws.
In a statement, the ICO said the fine was calculated based on the seriousness of the breaches, the number of affected users, and Reddit’s turnover. The regulator emphasised that it expected organisations offering online services to children and adults to put robust systems in place to verify age and comply with data protection obligations.
Reddit said it did not agree with the ICO’s findings and intended to contest the fine. A company spokesperson said Reddit had been engaging with the regulator and was committed to improving its privacy practices. Reddit also said it was reviewing the decision and exploring options to appeal the penalty in the UK courts.
The ICO’s action reflects broader enforcement of digital age verification and privacy standards in the United Kingdom. The regulator has previously pursued other technology companies for failures to protect user data or to implement age checks where required by law. Regulators and child safety advocates have said that strong age verification mechanisms are necessary to protect minors online, including for platforms that host user-generated content.
Reddit’s fine is one of the largest penalties issued by the ICO in recent years, and signals heightened scrutiny of online platforms’ compliance with privacy law. The company said it continues to invest in tools and processes intended to strengthen data protection and user safety across its services while the dispute over the fine proceeds through legal channels.