Root cause
Children's data
Processing children's personal data without age assurance, parental consent or a lawful basis — the ICO's most active enforcement front against large platforms.
3
UK enforcement actions
£14.87m
in penalties
2
sectors affected
Where it happens
- Online technology and telecoms2
- Central government1
Every case
- Reddit, Inc. We imposed a £14,472,500.00 penalty to Reddit, Inc. for infringing Articles 5(1)(a), 6, and 8, and Article 35 of the UK GDPR.
- MediaLab.AI, Inc. £247,590 penalty imposed on MediaLab.AI, Inc. in respect of infringements of Articles 5(1)(a), 6, 8 and 35 UK GDPR. MediaLab opera…
- Department for Education The DfE permitted third party access to the LRS database outside of the DfE and subsequent processing took place of some of that p…