UK's Information Commissioner's Office, today:
> We have fined MediaLab.AI, Inc. (MediaLab), owner of image sharing and hosting platform Imgur, £247,590 for failing to use children’s personal information lawfully.
> We concluded MediaLab breached the law by:
> Failing to implement any measures to check the age of users.
> Processing the personal information of children under 13 without parental consent or any other lawful basis when offering online services.
> Failing to carry out a data protection impact assessment to identify and reduce privacy risks to children.
I will need to see the actual notices, and their reasoning, to see how far the ICO considers that this extends.
A double-whammy of #AgeVerification expectations under both the UK #OnlineSafetyAct and data protection frameworks?
I will be interested to see what made "consent" the only available lawful basis for the processing.