On 24 February 2026, the ICO confirmed a fine against Reddit Inc (Reddit) for £14.47 million for failures in processing children’s data. The ICO found that Reddit:
-
failed to check users’ ages, relying on self declaration and therefore did not have a lawful basis for processing the personal data
-
failed to carry out a DPIA
This exposed children to risk of inappropriate and harmful content and is very similar to the MediaLab.AI Inc earlier this month.
The ICO press release can be found here.
If you would like help to consider the risks associated with processing children’s data, please get in touch by emailing hello@hellodpo.com