UK ICO imposes £14.5 million fine for failure to implement age assurance
Platforms must deploy robust age-verification beyond self-declaration
Change
UK's Information Commissioner's Office imposed a £14.5 million fine for unlawful processing of children's data and failure to conduct a required data protection impact assessment.
Why it matters
The enforcement confirms that reliance on self-declared age is insufficient for high-risk services and requires proportionate, auditable age-assurance mechanisms before processing children's data.
Implications
- — Platforms must implement robust age-verification systems — reliance on self-declaration risks enforcement action
- — Data protection teams must complete DPIAs before processing children's data — failure risks fines
Full decision brief
See the decision layer
Use 1 free preview to unlock implications, who’s affected, what to watch, and Clarify for this brief.
2 free previews left this month · Resets 1 Jun
Source