The UK information regulator has fined the social information service Reddit £14.5m for utilizing the knowledge of youngsters beneath the age of 13 unlawfully and doubtlessly exposing them to inappropriate and dangerous content material.
The hefty punishment from the Info Commissioner’s Workplace (ICO) is the largest nice but for a breach of youngsters’s privateness and comes after the US-based firm launched age checks in July, together with age verification to entry mature content material. Prior to this, the ICO stated, there have been “numerous kids beneath 13 on the platform and Reddit did not have a lawful foundation for processing their private information”.
Reddit asks customers to declare their age when opening an account however the ICO stated relying on self-declaration introduced dangers to kids because it was straightforward to bypass. The regulator additionally discovered Reddit failed to perform an information safety impression evaluation to assess and mitigate dangers to kids before January 2025.
“Youngsters beneath 13 had their private information collected and utilized in methods they might not perceive, consent to or management,” stated John Edwards, the information commissioner. “That left them doubtlessly uncovered to content material they need to not have seen. This is unacceptable and has resulted in as we speak’s nice.”
It is the third largest monetary punishment the ICO has issued, after a £20m nice for a British Airways knowledge breach affecting greater than 400,000 prospects in 2018, and an £18.4m nice for the Marriott Lodge group when greater than 300m buyer data had been affected in a 2014 assault.
Reddit stated it will enchantment in opposition to the choice. “The ICO’s insistence that we accumulate extra personal information on each UK consumer is counterintuitive and at odds with our robust perception in our customers’ on-line privateness and security,” a spokesperson stated.
The corporate stated it did not require users to share information about their identities, no matter age, “as a result of we are deeply dedicated to their privateness and security”. It says it removes customers beneath the age of 13 as a result of they are not allowed. Its consumer settlement states that “through the use of the companies, you state that you just are at least 13 years old”.
Since final July, Reddit began requiring UK customers who need to view mature content material equivalent to pornography to present they are over 18 by importing a selfie or a photograph of their authorities ID, so as to adjust to the On-line Security Act.
Edwards stated: “Corporations working on-line companies doubtless to be accessed by kids have a duty to shield these kids by guaranteeing they’re not uncovered to dangers via the manner their knowledge is used. To do that, they want to be assured they know the age of their customers and have applicable, efficient age assurance measures in place. Reddit failed to meet these expectations.”
Campaigners for youngster rights on-line stated the regulation wanted to forestall the danger posed by Reddit had been in place since 2018.
Colette Collins-Walsh, the head of UK affairs at the 5Rights Basis, stated: “For years, a significant world platform relied on little greater than a tick-box self-declaration of age, leaving the youngest customers unprotected.
“Whereas the authorities debates elevating age limits on-line, the regulation wanted to forestall precisely this sort of failure has been in place since 2018 and was merely not enforced. New guidelines imply little if present ones are not upheld.”
Disclaimer: This article is sourced from external platforms. OverBeta has not independently verified the information. Readers are advised to verify details before relying on them.
