ICO fines Reddit £14.47 million. No DPIA – no written Risk assessment — was done before launching features children would use. Age verification was to provide one's date of birth. The ICO found that Reddit had not conducted a single formal assessment of what it means to allow minors onto a platform with user-generated content.
What does this mean to you?
Before you launch a new system that processes personal data about vulnerable groups—perform a written risk assessment. Not because the authorities require it, but because it forces you to think through what could go wrong.
Inspired by: Initial Coin Offering