Discussion
Loading...

Post

Log in
  • About
  • Code of conduct
  • Privacy
  • About Bonfire
Neil Brown
Neil Brown
@neil@mastodon.neilzone.co.uk  ·  activity timestamp 2 days ago

UK's Information Commissioner's Office, today:

> We have fined MediaLab.AI, Inc. (MediaLab), owner of image sharing and hosting platform Imgur, £247,590 for failing to use children’s personal information lawfully.

> We concluded MediaLab breached the law by: 
> Failing to implement any measures to check the age of users.
> Processing the personal information of children under 13 without parental consent or any other lawful basis when offering online services.
> Failing to carry out a data protection impact assessment to identify and reduce privacy risks to children.

https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2026/02/imgur-owner-medialab-fined-over-children-s-privacy-failures/

Imgur owner MediaLab fined over children’s privacy failures

Our investigation found MediaLab used children’s data unlawfully    
  • Copy link
  • Flag this post
  • Block
Neil Brown
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 2 days ago

I will need to see the actual notices, and their reasoning, to see how far the ICO considers that this extends.

A double-whammy of #AgeVerification expectations under both the UK #OnlineSafetyAct and data protection frameworks?

I will be interested to see what made "consent" the only available lawful basis for the processing.

  • Copy link
  • Flag this comment
  • Block
Ed Davies
Ed Davies
@edavies@functional.cafe replied  ·  activity timestamp 2 days ago

@neil I will be interested to see if MediaLab even bother to blow a raspberry in the ICO's general direction.

  • Copy link
  • Flag this comment
  • Block
Neil Brown
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 2 days ago

@edavies The press release does say

> We also considered MediaLab’s acceptance of our provisional findings set out in the Notice of Intent issued in September 2025 and its commitment to address the infringements if access to the Imgur platform in the UK is restored in the future.

so, perhaps?

  • Copy link
  • Flag this comment
  • Block
Ed Davies
Ed Davies
@edavies@functional.cafe replied  ·  activity timestamp 2 days ago

@neil Sounds like they were just calmly not burning their boats and will factor the fine into any evaluation of restoring access in the UK. If they don't see the point of that now I imagine they'll do whatever they can to defer the decision and simply ignoring it for now would likely work best.

  • Copy link
  • Flag this comment
  • Block
Neil Brown
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 2 days ago

@edavies Quite plausibly, yes.

  • Copy link
  • Flag this comment
  • Block
الجبر خوارزمی
الجبر خوارزمی
@lbruno@miserables.net replied  ·  activity timestamp 2 days ago

@neil ... kinda surprising if they can't use the same “i'm a subprocessor performing my contractual duties” excuse that the rest of social media uses

  • Copy link
  • Flag this comment
  • Block
Neil Brown
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 2 days ago

@lbruno A subprocessor of whom? Sorry, I might be missing something!

  • Copy link
  • Flag this comment
  • Block
الجبر خوارزمی
الجبر خوارزمی
@lbruno@miserables.net replied  ·  activity timestamp 2 days ago

@neil my understanding is that all the user-generated content companies [social media, img upload, wordpress, etc] are describing themselves as subprocessors, not data controllers:

since it's a free-form textbox, they don't actually control what you type -- you open an account w/ them to subcontract the distributing of your blog posts/tweets

you the user are the data controller of your blog posts' contents

or at least that's what i remember from Blogger's policy back when

  • Copy link
  • Flag this comment
  • Block
Neil Brown
Neil Brown
@neil@mastodon.neilzone.co.uk replied  ·  activity timestamp 2 days ago

@lbruno Ah, okay!

  • Copy link
  • Flag this comment
  • Block

BT Free Social

BT Free is a non-profit organization founded by @ozoned@btfree.social . It's goal is for digital privacy rights, advocacy and consulting. This goal will be attained by hosting open platforms to allow others to seamlessly join the Fediverse on moderated instances or by helping others join the Fediverse.

BT Free Social: About · Code of conduct · Privacy ·
Bonfire social · 1.0.1 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Code of Conduct