UK Fines Reddit Over Weak Age Checks

A UK regulator has fined Reddit £14.5 million ($19.6 million) for failing to verify user ages adequately. The Information Commissioner’s Office (ICO) accused the platform of illegally processing children’s data, which potentially exposed them to harmful content, due to a lack of robust age checks.

The ICO’s investigation found that before July 2025, Reddit had no legitimate basis to process data from children under 13, as it did not implement strong age assurance measures. Although Reddit introduced an age-check system in July 2025 for UK users accessing adult content, the regulator remains concerned because the platform still relies on users to self-report their age when creating an account. The ICO argues in a press release that this method is too easy for children to bypass, putting them at continued risk.

Reddit has announced it will appeal the fine, criticising the ICO for demanding more extensive data collection. The company maintains its commitment to privacy, stating in a release: “We are deeply committed to their privacy and safety, so we don’t require users to share information about their identities, regardless of age.” Reddit argues the ICO’s demands are “illogical” and plans to challenge the ruling.

The fine also cites Reddit’s failure to conduct a required Data Protection Impact Assessment (DPIA) for children’s risks until January 2025. This follows a similar, smaller fine for Imgur’s parent company, MediaLab.

While the ICO’s fine addresses past data protection law violations, age checks on Reddit are also under separate investigation by Ofcom under the UK’s Online Safety Act. In July 2025, Reddit began using the third-party service Persona for age verification when users attempt to view adult content. However, the ICO has put Reddit on notice that its continued reliance on self-declaration for account creation makes it a high priority for further regulatory scrutiny. The ICO is pushing platforms to adopt more robust age assurance methods.

Reddit counters that users under 13 are prohibited and removed globally, and it provides a reporting mechanism for underage users. The company has not clarified if it will expand its use of Persona, which verifies age via selfies or government IDs without sharing the images with Reddit, to users outside the UK.

Reddit has declared its intention to appeal the ruling, claiming that requiring identity verification will jeopardise user security and privacy.

The UK’s ICO has fined Reddit £14.5 million for failing to verify user ages, accusing the platform of illegally processing children’s data and potentially exposing them to harmful content. While Reddit introduced age checks in July 2025, the regulator argues that relying on users to self-declare their age is too easy to bypass. Reddit plans to appeal, arguing the ruling unfairly pushes it to collect more private data, contradicting its commitment to minimal identity collection. The ICO warns it will continue scrutinising platforms that depend on self-declaration for age assurance.