Reddit Just Got Fined for Collecting Kids' Data While Claiming Children Weren't Allowed on the Platform

If you've spent any time on the internet, chances are you’ve used Reddit. It's one of the biggest platforms in the world, with roughly 121 million daily users across thousands of communities, covering everything from home cooking to geopolitics. It turns out that it also didn’t really bother to actually comply with the new laws and check whether any of those users were children.

The UK's Information Commissioner's Office just made that negligence very expensive, handing Reddit its largest-ever children's privacy fine: £14.47 million. The reason is almost embarrassingly simple: Reddit told children under 13 they couldn't use the platform, put up a simple “input your age” at the registration, and left it at that, collecting their data just like everyone else's.

Reddit, being a privacy-first company, has understandably responded by appealing.

The Rules Reddit Knew About and Ignored Anyway

Reddit's own terms of service have long prohibited children under 13 from using the platform. That part they got right. What they never bothered doing was building anything to actually enforce it.

According to the ICO's investigation, Reddit had no robust age assurance mechanism in place until July 2025. That's years of a platform that hosts everything from gaming communities to genuinely adult content, completely open to children, with no checks whatsoever. On top of that, Reddit failed to carry out a Data Protection Impact Assessment before January 2025, which, under UK data protection law, is a mandatory step before you start processing data that could put children at risk.

As a result, Reddit had no lawful basis for processing the personal information of children under 13 at all. A large number of them were estimated to be active on the platform the whole time, and, of course, their data was being collected, processed, and used in ways they couldn't understand, consent to, or control.

UK Information Commissioner John Edwards put it plainly: children were potentially exposed to content they should never have seen, and that's unacceptable. On that specific point, he's right.

Why a £14.47M Fine is Just the Beginning

This is the ICO's largest-ever fine specifically tied to children's privacy. It follows the February 2026 penalty against Imgur's parent company MediaLab, which got hit for similar failures and subsequently pulled out of the UK market entirely.

Reddit won't be the last. The ICO is currently investigating 17 other platforms, including Discord, Pinterest, and X. Meta and Snapchat are also under scrutiny over how they handle children's location data. The regulator estimates its enforcement work will have already positively impacted over 3 million children across various platforms as of late 2025.

This is all part of a broader pattern. The UK has been tightening its grip on how platforms handle age verification, from social media giants to adult content sites. Platforms that said one thing and did another are finally being held to account. But while this part is hard to argue with, nothing is ever really black and white.

Protecting Kids and Protecting Privacy are Not the Same Thing

Reddit, for all its failures, has always been built around anonymity. You don't need a name, a phone number, or proof of anything to use it. That's not an accident but a core part of what the platform is. Reddit pushed back on the fine, calling the ICO's demands "counterintuitive" and "at odds with our strong belief in our users' online privacy and safety." Convenient argument when you're facing a £14.47M bill, sure, but they do have a good point.

Because the logical conclusion of "platforms must know how old you are" is "platforms must know who you are." And once you go down that road, anonymity disappears. Reddit's current fix already asks users to submit government ID or a selfie through a third-party verification service to access mature content. And yet, the ICO still considers that insufficient for new account sign-ups.

This instantly changes that direction, making you ask if it’s really about children's safety at all. Because, if you can’t access the content you’re not supposed to without providing proof of your age but can browse the rest of the content, which is completely fine, then where’s the problem, right? Unless, of course, the goal is the data, not protection.

Ultimately, fining platforms that pretend to protect children while doing nothing is the right call. But if the fix is a surveillance layer built into every platform teenagers might use, we're only making things worse.