Children’s Data Protection

Netherlands Blocks US Takeover of DigiD Operator Solvinity Over Security Concerns

State Secretary Aerdts of Economic Affairs has blocked U.S. company Kyndryl’s acquisition of Solvinity, the Dutch operator of DigiD, citing the “need to protect the public interest.” This decision follows concerns raised in the Tweede Kamer regarding foreign ownership of critical Dutch digital infrastructure and potential risks to data security and sovereignty due to U.S. laws. The regulatory agency, Investment Screening Bureau (BTI), advised prohibition based on the Insufficient Controls of Telecommunications Act (WOZT), which focuses on risks to the public interest rather than the nationality of the acquiring company. The prohibition was enacted to prevent imminent completion of the transaction and safeguard sensitive Dutch government systems and citizen data.

Read More

UK Fines Reddit $20 Million Over Children’s Data Failures

Britain’s data watchdog has fined Reddit £14.5 million for failing to adequately protect children’s personal data and for not conducting a required risk assessment before January 2025. The Information Commissioner’s Office (ICO) found that the platform unlawfully collected and used the personal information of children under 13, potentially exposing them to harmful content. While Reddit prohibits users under 13, it lacked age verification measures until July 2025, leading to children’s data being processed without their understanding or consent. The company intends to appeal this decision, which stems from an investigation launched in March 2025 into Reddit’s age assurance and data usage practices.

Read More