On 24 February 2026, the Information Commissioner’s Office (ICO) fined Reddit GBP 14.47 million for failing to use children’s personal information lawfully under the UK General Data Protection Regulation (UK GDPR). The ICO found that Reddit failed to conduct a data protection impact assessment prior to January 2025 to assess and mitigate risks to children. Reddit also neglected to apply age verification mechanisms and therefore could not lawfully process the personal information of children under 13. The ICO noted that Reddit's July 2025 implementation of self-declaration age measures presents risks to children, as it is easy to bypass.
Original source