On March 30, 2026, the FTC filed a complaint and consent order against OkCupid (operated by Humor Rainbow, Inc.) and Match Group Americas for sharing millions of users' personal data with an unauthorized third party in violation of their own privacy policies.[1][3] The companies gave the unrelated third-party AI firm Clarifai access to personal information including nearly 3 million photos, demographic data, and location information.[4][6] Under the settlement, the companies neither admitted nor denied the allegations but agreed to a permanent injunction prohibiting misrepresentations about data collection, use, disclosure, and privacy controls.[1]
Who's Involved
The enforcement action targets two affiliated entities: Humor Rainbow, Inc. (which operates OkCupid) and Match Group Americas, which provides services to Humor Rainbow.[3] The third party that received the data is Clarifai, an AI company with financial ties to OkCupid's founders.[5][7] The FTC's Bureau of Consumer Protection, led by Director Christopher Mufarrige, brought the action.[3]
Context and Timeline
The unauthorized data sharing occurred since September 2014, yet users were never informed or given the option to opt out, despite OkCupid's privacy policies explicitly stating the company would not share personal information without user consent.[1][2] When media reports exposed the data transfer, OkCupid publicly denied involvement and allegedly obstructed the FTC's investigation, forcing the agency to enforce a Civil Investigative Demand in federal court.[3][4]
Why It's Newsworthy
This case represents significant FTC enforcement against deceptive privacy practices in the tech industry. Notably, the settlement includes no monetary fines—only operational restrictions—leaving affected users without compensation.[5] The case underscores broader concerns about third-party data sharing and demonstrates the FTC's willingness to pursue court enforcement when companies obstruct investigations.