The UK’s data protection watchdog, the Information Commissioner’s Office, has fined MediaLab, the owner of Imgur, £247,590 for serious failures in protecting children’s personal information.
The regulator said the company allowed children to use the platform for years without basic safety and privacy safeguards required under UK law.
Following an investigation, the ICO found that MediaLab did not put any age-checking measures in place, meaning it had no way of knowing whether users were children. As a result, personal data belonging to children under the age of 13 was processed without parental consent or any other lawful basis, which is a direct violation of UK GDPR rules.
Because user age was never verified, children using Imgur were at risk of being exposed to harmful and inappropriate content. The ICO said this included material linked to eating disorders, hate speech, antisemitism, and sexual or violent imagery. The company also failed to carry out a data protection impact assessment, which is required to identify and reduce risks to children’s privacy.
UK Information Commissioner John Edwards said MediaLab ignored its legal responsibility to protect young users. He stressed that age checks are essential to stop children’s data from being used in ways that could harm them, such as through algorithm-driven content recommendations. According to the ICO, companies that fail to acknowledge children using their platforms can expect similar enforcement action.
The fine covers violations that occurred between September 2021 and September 2025. While the penalty is well below the maximum allowed under UK law, the ICO said the amount reflects the number of children affected, the duration of the breaches, and MediaLab’s agreement to fix the issues if Imgur becomes available again in the UK. The regulator warned that further action could follow if the company fails to keep its promises.





