The UK Information Commissioner's Office has fined Reddit £14.5 million ($19.6 million) for failing to verify user ages, resulting in the unlawful processing of personal data belonging to children under 13. The penalty addresses Reddit's practices before July 2025, when the company operated without what the ICO described as "any robust age assurance mechanism".
The enforcement action centres on Reddit's failure to establish a lawful basis for handling data from users below the minimum age set by UK data protection law. Without age checks in place, the platform collected and processed information from children who should have been barred from the service, potentially exposing them to content designated for adults.
What the Investigation Found
According to the ICO's findings, Reddit processed children's personal information without meeting legal requirements under UK data protection regulations. The regulator determined that Reddit's lack of age verification meant the company had no lawful grounds to collect, store, or use data from users under 13.
"These failures meant Reddit was using children's data unlawfully, potentially exposing them to inappropriate and harmful content," the ICO stated in its announcement.
The investigation examined Reddit's systems and policies during the period before the company implemented age verification measures in July 2025. During that time, users could create accounts and access the platform's full range of content without proving their age.
Reddit's Response and Current System
Reddit rolled out an age verification system for UK users in July 2025 that requires age confirmation before accessing adult content. The company implemented the changes while the ICO investigation was ongoing.
The new system represents a shift in how Reddit handles age-related restrictions for its UK user base, though the ICO has expressed reservations about its effectiveness. The regulator noted that Reddit's current approach relies on users self-declaring their ages during account creation, rather than employing independent verification methods.
Regulatory Concerns Persist
Despite the July 2025 changes, the ICO said it remains concerned about Reddit's age assurance practices. The regulator's scepticism focuses on the self-declaration model, which allows users to input their birth dates without external validation.
Self-reported age systems face a fundamental challenge: they depend on user honesty and can be easily circumvented by anyone willing to provide false information. The ICO's continued concern suggests the regulator may view Reddit's current system as insufficient to prevent underage access.
The £14.5 million fine ranks among the ICO's larger penalties for age verification failures. The amount reflects both the scale of Reddit's UK user base and the duration of the compliance gap identified by investigators.
What Happens Next
The ICO has not indicated whether it will require Reddit to implement additional age verification measures beyond the July 2025 system. The regulator's ongoing concerns suggest further dialogue between the ICO and Reddit about acceptable age assurance methods.
Reddit must pay the fine and may face additional scrutiny of its age verification practices. The case adds to growing regulatory pressure on social platforms to prevent children from accessing services designed for adults, particularly as UK authorities increase enforcement of data protection rules affecting minors.