FTC Settles with Match Group Over OkCupid User Data Sharing

The U.S. Federal Trade Commission (FTC) has reached a settlement with Match Group , the parent company of OkCupid, after the dating platform allegedly shared users’ personal data with a third-party AI company without proper consent. The agreement, announced on March 30, 2026, prohibits Match from misrepresenting its data practices but notably includes no monetary fines.

According to the FTC complaint, OkCupid violated its own privacy policy by providing user photos, location information, and other personal data to Clarifai, an AI firm with financial ties to OkCupid’s founders. The policy explicitly stated that user data would not be shared with third parties except for service providers, business partners, or entities within the Match Group family. Clarifai did not fall into any of those categories.

The unauthorized sharing reportedly began as early as 2014 and continued for years. The FTC highlighted that the companies took steps to conceal the practice and impeded the agency’s investigation. Clarifai uses facial recognition and other AI technologies, raising additional privacy concerns for users who may not want their dating profiles or images analyzed or shared beyond the intended platform.

Match Group acknowledged the practices were outdated and stated they “do not reflect how OkCupid operates today.” As part of the settlement, the company is permanently barred from misrepresenting how it collects, uses, discloses, or protects personal information, including photos. It must also accurately describe the purpose of data collection and the function of any privacy controls offered to users.

This is not Match Group’s first encounter with the FTC. In August 2025, the company settled another lawsuit over deceptive advertising, cancellation difficulties, and billing practices, agreeing to pay $14 million to affected consumers. Consumer protection experts note that while the FTC has authority to address deceptive practices, its enforcement options are limited without broader federal data protection laws.