
Reddit hit with £14m ICO penalty over age‑verification failings
What happened
Regulatory action landed on Reddit after an ICO probe concluded the platform processed the personal data of under‑18s without adequate controls; the UK data regulator imposed a penalty of just over £14m and flagged missing safeguards.The ICO's findings centred on the absence of an effective age assurance system and the failure to complete a required data protection impact assessment (DPIA) prior to January 2025 — omissions the watchdog said left children exposed to inappropriate content and avoidable data uses.
Reddit said it prioritises user privacy and will appeal the decision, arguing that a requirement to collect identity information for every UK user would conflict with its design principles and the protection of anonymous engagement.
This enforcement sits alongside a wave of UK regulatory actions targeting age‑checks across different online sectors. Ofcom has used the Online Safety Act to fine adult‑content operators — for example, a recent £1.35m sanction against 8579 LLC for failing to implement age checks — while major adult sites’ operators such as Aylo (owner of Pornhub) have begun blocking unverified UK users ahead of compliance deadlines.
Those other actions illustrate two complementary but distinct enforcement tracks: the ICO is framing failures as data‑protection breaches (DPIA and lawful processing duties), whereas Ofcom’s Online Safety Act regime focuses on protecting minors from access to harmful content and can include escalating daily fines and site‑access remedies.
Industry responses vary accordingly. Adult‑content operators argue mandatory, centralised verification can push traffic to unregulated services, while platforms that prize anonymity (like Reddit) warn that identity‑first obligations undermine core product assumptions and create privacy risks.
For platform operators the ruling crystallises immediate choices: deploy more robust age‑assurance measures, document DPIAs and processing justifications, or risk enforcement across multiple UK regulators — each with different powers and potential remedies.
Technology vendors that provide identity verification, cryptographic attestations or device‑based checks are likely to see near‑term demand, but integrating these solutions carries technical costs and user‑experience trade‑offs that can reduce engagement.
Policymakers now face a practical dilemma: stricter controls can reduce underage exposure on mainstream platforms but may also drive users to less regulated corners of the internet or incentivise workarounds such as VPNs and fake credentials.
The case establishes a stronger enforcement precedent linking data‑processing practices to child protection outcomes under UK law and signals that firms operating across content types should expect coordinated scrutiny from both data and safety regulators.
For users and families, the outcome reframes trust markers: platforms will need to explain how age is determined, what data is collected, how DPIAs shaped decisions, and what safeguards protect minors — or face fines and restrictions in the UK market.
Read Our Expert Analysis
Create an account or login for free to unlock our expert analysis and key takeaways for this development.
By continuing, you agree to receive marketing communications and our weekly newsletter. You can opt-out at any time.
Recommended for you

Ofcom fines 8579 LLC £1.35m for age-verification lapses
Ofcom has fined 8579 LLC £1.35m under the Online Safety Act for failing to deploy effective age checks on its adult websites; a further £50,000 penalty was issued for ignoring regulator requests. Regulators have set immediate deadlines and potential daily penalties, signaling tougher enforcement of age-verification rules for online adult platforms.
Pornhub to block many UK visitors as new age-verification deadline looms
Parent company Aylo will make Pornhub inaccessible to new UK visitors after February 2 unless they complete the required age checks; previously verified accounts remain functional. Aylo warns that restrictive verification rules may push users toward unregulated sites and raises privacy and enforcement concerns.

Brazil to Require Age Verification to Block Teen Access to Gambling and Adult Content
Brazil is drafting rules that would force app stores, platforms and sites that run ads to verify users’ ages and block minors from gambling, pornography and other adult services. The proposal echoes moves in Europe and the UK and raises enforcement, privacy and compliance trade‑offs for global and local tech firms.

Australia Rebukes Major Tech Firms Over Failures to Curb Child Sexual Abuse Material
Australia’s government publicly condemned large technology platforms for failing to stop the spread of child sexual abuse content, pressing for faster detection, clearer reporting and stronger enforcement. Officials signalled tougher oversight and potential regulatory steps that would force platforms to change moderation practices and cooperation with law enforcement.

Discord will require ID or a biometric check to view adult content
Discord is rolling out a global age-verification system that forces users to prove adulthood with either an ID photo or a short video selfie before they can access age-restricted material. The move aims to default the platform to a safer experience for younger users but revives privacy and security concerns after a prior verification data exposure.

Discord ends Persona pilot after UK age-check uproar
Discord halted a small UK trial with identity vendor Persona after users discovered the experiment and raised privacy alarms; the pause comes as Discord prepares a broader age-verification push that would ask some users for ID or a video selfie, which the company says are processed transiently. The episode — which exposed frontend files and recalled a prior vendor breach — eroded trust in third-party verification and amplified concerns about accessibility, vendor audits and the operational burden of enforcing age gates.
Senators demand answers from Meta over delay in default-private settings for teen accounts
A bipartisan group of U.S. senators has asked Meta’s CEO to explain why the company postponed making teen accounts private by default after internal documents suggested the change was considered earlier. Lawmakers are also probing enforcement practices for abuse and whether safety research that showed harm was suppressed, and they have set a deadline for Meta’s written response.

UK ad regulator orders Coinbase to withdraw ads for implying crypto solves household financial strain
The U.K. Advertising Standards Authority has ruled that a series of Coinbase adverts improperly suggested digital assets could be a remedy for household financial pressures and underplayed investment risks, ordering the ads to be withdrawn. The move comes as broader U.K. regulatory work tightens rules for crypto marketing, signaling heightened scrutiny of messaging that links financial hardship to investment products.