FTC Settles with OkCupid, Match over Deceptive Data Sharing

Published
Score
10

Why it matters

On March 30, 2026, the FTC filed a complaint and consent order in the U.S. District Court for the Northern District of Texas against Humor Rainbow, Inc. (operator of OkCupid) and affiliate Match Group Americas, alleging violations of Section 5 of the FTC Act for sharing millions of users' personal data—including photos, demographics, and location—with an unauthorized third-party AI firm (Clarifai) since September 2014, contrary to their privacy policies promising no sharing without notice or opt-out.[1][3][7]

The companies neither admitted nor denied the allegations but agreed to a 20-year stipulated order prohibiting misrepresentations about data collection, use, disclosure, protection, purposes, and privacy controls; requiring accurate disclosures and compliance reporting; and subjecting them to FTC oversight—no monetary fines were imposed.[1][3][5] The FTC enforced a Civil Investigative Demand in court after the companies allegedly concealed practices and obstructed the probe, including denying involvement post-media reports.[3][4]

This stems from 2014 privacy promises limiting third-party sharing, violated without user notification; newsworthy now amid rising FTC scrutiny of privacy breaches (e.g., BetterHelp, GoodRx), highlighting risks of unauthorized AI data access and enforcement of self-made promises in dating apps handling sensitive info.[1][2][4] Lead FTC attorneys: Sarah Choi, Alejandro Rosenberg; quote from Director Christopher Mufarrige emphasizes upholding privacy commitments.[3]

Sources

mail

Get notified about new Privacy developments

Primary sources. No fluff. Straight to your inbox.

See more entries tagged Privacy.