Regulator applying privacy law and reviewing information-access refusals
Information Commissioner’s Office
The Information Commissioner's Office is the UK's data-protection regulator and an information-rights adjudicator. Its records here include a Reddit monetary penalty, described coordination with Ofcom and a decision on disclosure of a Crisp report. Those proceedings concern different legal functions.
Decisions and coordination
On 23 February 2026 ICO imposed a £14,472,500 UK GDPR penalty on Reddit concerning historical processing and impact-assessment failures; an appeal was recorded on 1 April. Its March records describe team-dependent fortnightly or quarterly meetings with Ofcom. Separately, a November 2025 decision upheld remaining national-security redactions after inspecting a requested Crisp report. None establishes a direction to buy an age-assurance vendor's service.
23 February 2026 decision;1 April 2026 appeal update
GBP 14,472,500 notice concerns processing from 25 May 2018 through 8 July 2025 and DPIA failures through 31 December 2024. Appeal recorded 1 April 2026; no payment or final tribunal outcome established. This is a data-protection penalty, not an OSA fine or direction to procure Persona. Financial details: value: 14,472,500; currency: GBP; kind: penalty imposed not payment; period: 23February2026 notice
Information Commissioner’s Office → Crisp report requested for week beginning24June2024
upholds remaining national-security redactions
2025-11-11 – 2025-11-11
11November2025 decision after independent inspection and partial release. June2024 referral count10 also disclosed; counts are referrals not removals. Appeal route exists. Ruling on disclosure, not operating legality or all-content review.
FOI response24 March 2026; individual dates not obtained
ICO describes team-dependent fortnightly/quarterly meetings when refusing a broad records request. Does not attribute every meeting to Reddit or establish particular decision instructions.
23 February 2026 decision;1 April 2026 appeal update
GBP 14,472,500 notice concerns processing from 25 May 2018 through 8 July 2025 and DPIA failures through 31 December 2024. Appeal recorded 1 April 2026; no payment or final tribunal outcome established. This is a data-protection penalty, not an OSA fine or direction to procure Persona.
FOI response24 March 2026; individual dates not obtained
Reported by the cited source
ICO describes team-dependent fortnightly/quarterly meetings when refusing a broad records request. Does not attribute every meeting to Reddit or establish particular decision instructions.
11November2025 decision after independent inspection and partial release. June2024 referral count10 also disclosed; counts are referrals not removals. Appeal route exists. Ruling on disclosure, not operating legality or all-content review.