Core Viewpoint - Reddit has been fined over £14 million by the Information Commissioner's Office for failing to protect children's data, particularly by not verifying the age of users and unlawfully processing personal information of children under 13 [1][2][3]. Group 1: Regulatory Findings - The investigation revealed that Reddit did not implement any robust age assurance mechanisms, lacking a lawful basis for processing personal information of children under 13 [1][2]. - Reddit failed to conduct a data protection impact assessment (DPIA) to evaluate and mitigate risks to children before January 2025 [2]. Group 2: Statements from Authorities - John Edwards, the UK Information Commissioner, expressed concern over Reddit's failure to fulfill its legal duty to protect the personal information of UK children [2]. - The ICO emphasized that children under 13 had their personal information collected and used in ways they could not understand or control, exposing them to inappropriate content [3]. Group 3: Industry Implications - The ICO highlighted that companies providing online services accessible to children have a responsibility to ensure effective age assurance measures are in place to protect children from risks associated with data usage [4]. - The reliance on users to self-declare their age is deemed insufficient, prompting a call for the industry to reflect on practices and make necessary improvements [5].
Reddit fined more than £14m over children's privacy failures