UK's ICO fines £14.5 million for inadequate age verification
Change
UK's ICO fined £14.5 million, finding the company unlawfully processed personal data of children under 13 and failed to carry out a required data protection impact assessment before January 2025.
Why it matters
Platforms that rely mainly on user self-declaration for age are now constrained: regulators expect proportionate, auditable age-assurance measures for services likely to pose high risks to children. The ICO has signalled it will prioritise further regulatory engagement and enforcement against high‑risk services that continue to use self-declaration in isolation.
Implications
- • Online platforms that primarily rely on self-declaration for user ages must adopt robust, proportionate age-assurance methods for UK users or face regulatory enforcement.
- • Product and compliance teams of platforms offering mature-content access in the UK must complete and document a data protection impact assessment before processing children’s personal data or deploying age-verification features.
Unlock the decision layer.
See what the change means — implications, exposure, timing — and ask AI about any brief instantly.
- Implications: What actually changes downstream.
- Who is affected: Which teams or operators are exposed.
- What to watch: Deadlines, triggers, and next moves.
- Real-time alerts: Know the moment a change is published.
- Ask AI: Clarify any brief instantly, in context.
14-day free trial. Full access. No credit card required.
Start free trial
Source
Topics