Britain’s data regulator has fined Reddit nearly $20 million for unlawfully collecting and using children’s personal data, a penalty that intensifies scrutiny of how social platforms handle young users’ information. The action, taken by the Information Commissioner’s Office (ICO), targets one of the internet’s largest discussion sites and raises fresh questions about age checks and design choices on popular apps used by teens.
“Britain’s privacy watchdog fines Reddit nearly $20 million for unlawfully collecting and using children’s personal data.”
The case centers on whether Reddit gathered and processed data from users under 18 without adequate safeguards, transparency, or legal basis under UK data protection law. It also spotlights the UK’s Children’s Code, which sets stricter rules for services likely to be accessed by children.
What the Regulator Said It Found
The ICO’s action suggests the regulator concluded Reddit failed to apply age-appropriate protections. While the details of each breach were not disclosed here, enforcement of this size typically points to weaknesses in age assurance, profiling controls, and default settings that expose children to tracking or data sharing.
Under UK GDPR, companies need a lawful basis to process personal data. For children, the bar is higher. Consent must be informed and meaningful. Defaults should favor privacy. If the regulator determined that Reddit collected data from underage users or used it for targeted features without proper safeguards, that would explain the scale of the fine.
Why Children’s Data Is Treated Differently
Children are given extra protection under UK law due to their limited capacity to assess risks online. The Children’s Code, which took effect in 2021, sets out 15 standards for services likely accessed by kids. These include data minimization and high privacy by default.
- Make privacy settings high by default for children.
- Switch off geolocation and profiling unless strictly necessary.
- Use age-appropriate transparency and language.
- Limit nudge techniques that encourage sharing more data.
Regulators also expect firms to assess risks and implement age assurance that is effective but proportionate. That remains a challenge across the industry.
How This Fits a Wider Enforcement Pattern
The ICO has used fines and audits to push platforms toward safer design for young users. In 2023, the regulator fined TikTok £12.7 million for allowing under-13s to use the service and mishandling their data, according to public records. Other European and U.S. cases have carried even larger penalties. Ireland’s data regulator fined Instagram €405 million in 2022 over children’s data handling. The U.S. Federal Trade Commission reached settlements involving Epic Games at $520 million in 2022 and YouTube at $170 million in 2019.
These cases show regulators are aligning on higher expectations for consent, profiling limits, and default settings for minors. The Reddit penalty adds momentum to that trend and signals continued oversight across major platforms.
Industry Impact and Company Response
For social platforms, the case is a warning that general audience services must still account for substantial numbers of teen users. Measures that may be acceptable for adults often fail for minors.
Experts say companies should review how they infer age, how they personalize feeds and ads, and how they present choices. Clear language and safer defaults reduce risk. Stronger checks can also help shut out underage accounts without resorting to heavy-handed identity verification.
Investors and advertisers are likely to watch how Reddit responds. Product changes that limit profiling or tracking for young users can affect engagement and ad targeting. But failure to adapt can invite larger penalties and reputational damage.
What Parents and Young Users Should Know
Parents can use platform tools to restrict features such as direct messages, location sharing, and personalized ads. Teens should review privacy settings and be cautious about sharing profile details that can be used to infer age or interests.
Clear, high-privacy defaults reduce the burden on families. Still, vigilance matters, especially on services with public communities and user-generated content.
What Comes Next
The fine increases pressure on platforms to prove they can identify likely child users and shield them from intrusive data practices. Expect more audits and design guidance from the ICO, and possibly new commitments from major apps on age assurance and profiling controls.
For Reddit and its peers, the key test is whether they can deliver meaningful transparency and safer defaults without degrading user experience. The direction of travel is clear: protect children first, gather less data, and explain choices in plain language. Regulators have shown they will back that approach with serious penalties. Readers should watch for product updates, new privacy dashboards, and independent evaluations of age checks in the months ahead.
Kirstie a technology news reporter at DevX. She reports on emerging technologies and startups waiting to skyrocket.
