Regulators Impose Record-Breaking $19 Million Fine on Reddit Over Child Protection Failures

The Information Commissioner’s Office (ICO) has issued a record fine of £14 million to Reddit, the popular social news and discussion website, for violating UK data protection laws by failing to implement adequate age verification measures. The ICO stated that this failure allowed children to access content that was not suitable for their age, potentially exposing them to harmful material online. The ICO’s investigation found that Reddit had been collecting and storing personal data of users under the age of 18 without implementing sufficient age verification checks. This lapse in compliance with the UK’s General Data Protection Regulation (GDPR) and the Electronic Communications Regulations (ECRs) allowed minors to access content that was intended for adults only. The ICO’s chairman, John Edwards, stated that “Reddit has failed to protect children’s privacy and data” and that the fine reflects the severity of their non-compliance. The regulator emphasized that online platforms have a critical responsibility to ensure the safety and well-being of minors when it comes to their personal data. As part of the settlement, Reddit has agreed to implement new age verification measures on its platform, which will require users to verify their age through a process involving government-issued IDs or other approved methods. The company will also provide enhanced data protection controls to prevent unauthorized access to user data. The ICO’s actions serve as a reminder to online platforms of the importance of prioritizing data protection and safeguarding vulnerable populations. By failing to comply with data protection laws, Reddit has put its users at risk, and the regulator is taking decisive action to hold the company accountable for its mistakes.