The U.K. Information Commissioner's Office (ICO) has launched separate investigations targeting social media platforms TikTok, Reddit, and Imgur, focusing on the protection of children's privacy and personal data. This significant move signals the ICO's efforts to enforce stricter data protection measures for minors, particularly as the use of these digital platforms continues to expand rapidly.
Announced on March 3, 2025, the investigations primarily concern how TikTok utilizes the personal information of its users aged 13-17 to support its content recommendation algorithms. The probes involving Reddit and Imgur aim to assess their broader use of children's data and examine the effectiveness of their age assurance tools. ICO Commissioner John Edwards emphasized the importance of preserving children’s privacy, stating, "We welcome the technology and innovation...But this cannot be at the expense of children's privacy."
The ICO has long been vocally committed to ensuring children's online safety. Its recent actions come amid rising concerns over how much control parents feel they have over the information collected about their children on social media. According to recent ICO surveys, 42% of U.K. parents express significant worries, feeling they have "little or no control" over their children's data usage online. This finding sheds light on the urgency and relevance of the ICO's regulatory approach.
Edwards highlighted the importance of holding social media and video-sharing platforms accountable, asserting, "If social media and video sharing platforms want to benefit from operating in the U.K., they must comply with data protection law." The ICO aims to strengthen existing regulations under the UK Children's Code, which was enacted in 2021. This framework requires companies to implement age-verification methods, maintain transparency about data collection, and minimize the amount of data collected from underage users.
ICO Deputy Commissioner for Regulatory Policy, Emily Keaney, explained how the organization has been proactive since the application of the Children's Code. Last August, it reached out to social media platforms, prompting five of them to boost their default privacy settings for children, and others to restrict targeted advertising and location data sharing for users below 13 years old. Keaney underscored the importance of businesses considering young people's best interests, stating, "Our free interactions on these platforms may come with a trade-off."
Evidence of the ICO's increasing influence is clear. It successfully secured various privacy improvements from the social platform X and prompted mobile applications like Sendit and BeReal to adjust their children's geolocation data practices following ICO interventions. Keaney emphasized, "We will continue our work to drive changes. And, where necessary, we will use the full force of our regulatory powers to make sure young people can both benefit from and be safe within the online world."
Despite the ICO's advancements, many parents remain concerned. Only 23% of respondents indicated they or their children had ceased using specific platforms due to worries about data collection practices, highlighting the challenge of effectively addressing privacy concerns. Keaney noted this as part of why the new investigations are so necessary.
The ICO's recent investigations mark the organization's commitment not only to the U.K. but also establish it as potentially leading the global discourse on children's privacy rights. The ICO revealed various other enforcement cases from 2024, illustrating its decisive actions toward compliance and rectifying areas needing improvement.
Looking forward, the ICO aims to promote innovative digital solutions and nurture the U.K.'s growing digital economy without compromising children's online safety. Meanwhile, IT platforms face increasing pressure to reevaluate their algorithms and data handling practices to secure compliance with UK law.
With the investigative spotlight on TikTok, Reddit, and Imgur, these platforms must brace for adjustments as they work to align practices with ICO expectations dictated by the Children's Code and the broader regulatory framework. This scrutiny marks a notable chapter for social media companies, compelling them to recognize the necessity of prioritizing children's privacy and rights.