Reddit Fined $19.5 Million by UK Regulators for Child Data Privacy Violations

British data privacy regulators hit Reddit with a $19.5 million fine Tuesday for unlawfully collecting and using children’s personal information, marking the latest crackdown on social media platforms over child safety concerns.

The Information Commissioner’s Office issued the penalty after determining Reddit failed to protect users under 13 years old, according to the regulatory agency. The fine targets what officials called inadequate age verification measures that left children exposed to inappropriate content.

“Children under 13 had their personal information collected and used in ways they could not understand, consent to or control,” Information Commissioner John Edwards said in a statement. “That left them potentially exposed to content they should not have seen. This is unacceptable and has resulted in today’s fine.”

The UK privacy watchdog found Reddit lacked proper systems to verify user ages before July 2025, despite prohibiting children under 13 from using the platform, according to the regulatory findings. Reddit implemented age verification measures in July 2025 that require users to declare their age when creating accounts to access mature content.

However, regulators criticized this approach as insufficient. The Information Commissioner’s Office said “self-declaration” methods are easily bypassed and told Reddit it would continue monitoring the platform’s handling of children’s data, according to the agency.

The fine represents an escalation in UK regulatory pressure on social media companies regarding child protection. Earlier this month, the same watchdog fined MediaLab, which owns image-sharing site Imgur, approximately $335,000 for similar child safety failures, according to the Information Commissioner’s Office. The agency has also been investigating TikTok since last year over related concerns.

Edwards emphasized that online platforms likely to attract children bear responsibility for protecting young users through proper data handling practices. He said companies can fulfill this obligation by implementing “effective age assurance measures” to prevent children from exposure to risks through data misuse.

Reddit announced plans to appeal the decision, defending its privacy practices in a company statement. The platform argued its approach protects user anonymity across all age groups.

“Reddit doesn’t require users to share information about their identities, regardless of age, because we are deeply committed to their privacy and safety,” the company said. “The ICO’s insistence that we collect more private information on every UK user is counterintuitive and at odds with our strong belief in our users’ online privacy and safety.”

The case highlights ongoing tensions between privacy advocates who support minimal data collection and child safety regulators demanding stronger age verification systems. Reddit’s business model relies on allowing users to participate anonymously without requiring personal identification, according to the company.

The $19.5 million penalty reflects the Information Commissioner’s Office’s authority to impose substantial fines under UK data protection laws. The agency has increased enforcement actions against major technology companies in recent years, particularly focusing on platforms popular with younger users.

The fine comes as governments worldwide scrutinize social media companies over their impact on children’s safety and mental health. UK regulators have positioned themselves at the forefront of this movement, using data protection laws to address child safety concerns on digital platforms.

Reddit’s appeal will test the boundaries between user privacy protections and regulatory demands for enhanced child safety measures, potentially setting precedent for how other social media platforms must balance these competing priorities in the UK market.