- Enforcing jurisdiction
- United Kingdom · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
MediaLab.AI, Inc – €289,680 Fine (United Kingdom, 2026)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
MediaLab.AI, Inc. was fined nearly EUR 290,000 for failing to properly verify the ages of users on its platform, Imgur. This ruling emphasizes the responsibility of online platforms to protect younger users by ensuring they have appropriate age verification measures in place.
What happened
MediaLab.AI, Inc. was fined for processing personal data of users under 13 without a legal basis and lacking age verification.
Who was affected
Users of Imgur who are under 18 years old, particularly those under 13, were affected by the company's inadequate age verification practices.
What the authority found
The UK DPA found that MediaLab.AI, Inc. violated multiple UK GDPR articles by failing to protect the personal data of younger users.
Why this matters
This ruling highlights the importance of age verification for online services. Companies must implement effective measures to protect minors and comply with data protection laws.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
MediaLab.AI, Inc. (the controller) operates the platform Imgur, an online image sharing and hosting platform. The UK DPA (ICO) carried out a review in 2021 of the age verification practices of the platform. The DPA contacted the controller in 2024 regarding concerns due to the absence of any such measures and requested further information about the processing of personal data relating to users of the Platform aged under 18 years old. Subsequently, the DPA launched an investigation into the controller in December 2024. The DPA found three violations of the UK GDPR and fined the controller GBP 247,590 (approximately €282,917). Firstly, the DPA found that the controller processed personal data relating to users who were under 13 years old without legal basis, in breach of the principle of lawfulness, fairness and transparency in Article 5(1)(a) UK GDPR. Secondly, the DPA found that the controller permitted children under 13 years old to access the platform under parental supervision but did not use age verification and measures to obtain parental consent, breaching Article 6(1)(a) UK GDPR and Article 8 UK GDPR. Thirdly, the DPA found a violation of Article 35(1) UK GDPR. Specifically, the DPA noted that the controller failed to carry out a DPIA in respect of prospective high-risk processing of personal data of users who were under 18 years old.
Related Enforcement Actions (0)
No other enforcement actions found for MediaLab.AI, Inc in UK
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
4 February 2026
Authority
Information Commissioner's Office
Fine Amount
€289,680
247,590 GBP
GDPRhub ID
gdprhub-9844About this data
Cite as: Cookie Fines. MediaLab.AI, Inc - United Kingdom (2026). Retrieved from cookiefines.eu
Last updated: