Reddit fined €16 million for failing to protect children

Digital platforms have been under scrutiny from European regulators for several months, particularly regarding the protection of minors. After tech giants were regularly called to order, it is now Reddit that finds itself at the heart of a decision being closely watched in the United Kingdom.

Indeed, according to Euronews, the UK's data protection authority accuses the American social network of failing to protect children, in a decision that could set a precedent for all players in the sector…

A fine imposed by The ICO (Information Commissioner’s Office), the UK’s data protection authority, has fined Reddit £14.47 million, or approximately €16-17 million. Following an investigation, the regulator concluded that the platform had not implemented a sufficiently robust age verification mechanism. For a long time, Reddit relied on a self-declaration system, where users simply stated their age upon registration, without providing any supporting documentation. According to the ICO, this approach is largely inadequate, as minors can access adult or potentially harmful content. The regulator also considers that the company had not, until January 2025, carried out a Data Protection Impact Assessment (DPIA), which is required by UK legislation when data processing presents a high risk.

Children's Data Collected Without a Legal Basis

According to the ICO, the lack of effective age verification allowed the collection and processing of personal data of children under 13 years of age without a valid legal basis.

John Edwards, the UK Information Commissioner, stated that these young users had their information collected and used in a way they could not understand, accept, or control.

For its part, Reddit has announced its intention to appeal. The company states that it is deeply committed to protecting privacy and explains that it does not require identity verification, regardless of age, in order to limit the collection of sensitive data. For the platform, the regulator's requirement would amount to collecting more personal information on each British user, which it considers contrary to its privacy philosophy. A strong signal for the entire sector: This decision comes at a time when protecting children online is becoming a political priority in the United Kingdom and several European countries, including France. Beyond the Reddit case, this fine sends a clear message: digital services accessible to minors must demonstrate that they actually know the age of their users and that they have assessed the risks associated with processing their data. class="siecl-58c239f1ea2899e225a67c8ffebc2a59 siecl-appwiki-after-content" id="siecl-58c239f1ea2899e225a67c8ffebc2a59">