Dutch data-protection authority's GDPR probe into Reddit's AI data licensing (2025–2026)

The Netherlands' data-protection authority, the Autoriteit Persoonsgegevens (AP), opened a GDPR investigation into Reddit beginning around March 2025, examining whether Reddit lawfully licenses its users' public posts to developers of large language models. The inquiry focused on core GDPR principles — the lawfulness of processing, transparency to users, purpose limitation, and data minimization — as applied to Reddit's lucrative AI data-licensing deals. Because the AP can act as a lead supervisory authority, the matter has implications across the European Economic Area, not just in the Netherlands.

The investigation became contentious over Reddit's cooperation. According to reporting, Reddit stopped cooperating with the AP around October 2025, prompting the regulator to impose a penalty-payment order designed to compel compliance. The standoff escalated into litigation when Reddit took the AP to court, alleging that the regulator had mishandled sensitive material and violated attorney-client privilege in the course of its inquiry.

The case was heard by the District Court of The Hague, and in early March 2026 the court ruled against Reddit, rejecting all of the company's claims (the decision is recorded under ECLI:NL:RBDHA:2026:4248). The ruling meant Reddit's effort to shield certain material and to challenge the regulator's conduct failed, leaving the underlying GDPR investigation to proceed. The dispute centered on procedural and privilege questions rather than a final determination of whether Reddit's licensing practices themselves violated the GDPR.

The matter is significant as one of the most concrete European regulatory actions targeting the booming market in licensing user-generated content for AI training. Reddit's deals to provide its data to AI developers have been a major part of its commercial strategy, and the AP's probe directly tests whether that strategy is compatible with European data-protection law. Unlike a routine inquiry, this one produced active litigation and a court ruling, giving it unusual definition.

For an archive of Reddit's legal and regulatory entanglements, the Dutch case stands out as a European counterpart to the data-and-AI scrutiny Reddit has faced elsewhere. Much of the detailed coverage comes from legal-trade outlets, and the most consequential developments fall in 2026, but the existence of the investigation, the cooperation dispute, and the adverse Hague ruling are documented. The substantive GDPR questions about Reddit's licensing practices remained to be resolved.