🔐 𝗥𝗘𝗗𝗗𝗜𝗧 𝗙𝗜𝗡𝗘𝗗 £14.47 𝗠𝗜𝗟𝗟𝗜𝗢𝗡 𝗙𝗢𝗥 𝗖𝗛𝗜𝗟𝗗𝗥𝗘𝗡’𝗦 𝗣𝗥𝗜𝗩𝗔𝗖𝗬 𝗙𝗔𝗜𝗟𝗨𝗥𝗘𝗦 — 𝗔 𝗟𝗔𝗡𝗗𝗠𝗔𝗥𝗞 𝗨𝗞 𝗘𝗡𝗙𝗢𝗥𝗖𝗘𝗠𝗘𝗡𝗧 𝗔𝗖𝗧𝗜𝗢𝗡
Recently, the Information Commissioner’s Office (ICO) imposed a fine of approximately £14.47 million (~USD 19.5 million) on Reddit for processing the personal data of users under 13 without implementing appropriate age verification measures. This is reported to be the largest fine issued by the ICO to date in relation to children’s privacy, sending an important signal to online platforms globally.
📍 Key highlights of the case:
• Reddit lacked effective age assurance mechanisms prior to July 2025, resulting in the potential unlawful collection and use of children’s personal data.
• The ICO determined that the platform processed children’s personal data without a valid lawful basis and failed to conduct an adequate Data Protection Impact Assessment (DPIA) beforehand.
• Reddit has announced its intention to appeal, arguing that requiring additional identity information for age verification may conflict with core privacy principles.
🔎 It serves as a critical reminder for all organizations, especially digital services accessible to diverse user group, that privacy and personal data protection must be embedded from the design stage (Privacy by Design).
Looking Back on Our Two Workshops: Practical Perspectives on Personal Data Protection
💡 Looking Back on Our Two Workshops: Practical Perspectives on Personal Data Protection Following two specialised workshops on “Personal Data Protection”, PrivacyCompliance had the opportunity to engage with representatives from businesses and organisations, as well as professionals working in legal, compliance, information technology, data governance, and human resources. The programme focused not only on clarifying […]
Learn more
RECAP OF THE “PERSONAL DATA PROTECTION” WORKSHOP SERIES
RECAP OF THE “PERSONAL DATA PROTECTION” WORKSHOP SERIES ✨ The specialized Personal Data Protection workshop series organized by PrivacyCompliance has officially concluded, supporting participants in strengthening their legal compliance capabilities in the field of personal data protection. 📚 The program was structured around four key modules: 🔹 Legal framework for personal data protection. 🔹 Establishing […]
Learn more
Legal Update | Guidance on Submitting Soft Copies of Personal Data Protection Impact Assessment Dossiers
Recently, the Department for Receiving and Returning Administrative Procedure Results on Personal Data Protection issued guidance on the submission of soft copies of the Personal Data Processing Impact Assessment Dossier and/or the Cross-border Personal Data Transfer Impact Assessment Dossier. Under the guidance, organizations and enterprises are required to submit the dossier in a .ZIP compressed […]
Learn more