Pull to refresh
Logo
Daily Brief
Following Why Sign Up
Federal Trade Commission settles with Match Group over OkCupid's secret data pipeline to a facial recognition firm

Federal Trade Commission settles with Match Group over OkCupid's secret data pipeline to a facial recognition firm

Rule Changes
By Newzino Staff |

A decade-long trail from covert data sharing to cover-up ends with a consent order — but no fine

Today: FTC and Match Group announce settlement over OkCupid data sharing

Overview

In 2014, OkCupid quietly funneled nearly three million user photos — along with demographic and location data — to Clarifai, a facial recognition startup backed by OkCupid's own co-founders. Users never consented. OkCupid's privacy policy said this wouldn't happen. When a New York Times article exposed the arrangement five years later, OkCupid publicly denied it.

Why it matters

If dating apps can secretly feed your photos to facial recognition firms and face no fine, the cost of violating user privacy stays near zero.

Key Indicators

~3 million
User photos shared with Clarifai
OkCupid transferred approximately three million user photographs without consent.
12 years
Time from data sharing to settlement
The underlying conduct occurred in 2014; the settlement was filed in 2026.
$0
Monetary penalty
The settlement imposes injunctive relief and compliance reporting but no financial fine.
10 years
Compliance monitoring period
Match Group must submit compliance reports to the FTC for a decade.
2-0
FTC Commission vote
The complaint and settlement were authorized by a unanimous two-commissioner vote.

Interactive

Exploring all sides of a story is often best achieved with Play.

Ever wondered what historical figures would say about today's headlines?

Sign up to generate historical perspectives on this story.

Sign Up

Debate Arena

Two rounds, two personas, one winner. You set the crossfire.

People Involved

Max Krohn
Max Krohn
Named in FTC complaint as having personally facilitated the data transfer
MZ
Matthew Zeiler
Confirmed receiving OkCupid data in 2019 New York Times interview
 Sam Yagan
Sam Yagan
Co-founder of venture fund that invested in Clarifai
 Andrew N. Ferguson
Andrew N. Ferguson
Oversaw the settlement authorization
 Spencer Rascoff
Spencer Rascoff
Current chief executive overseeing the settlement

Organizations Involved

Federal Trade Commission (FTC)
Federal Trade Commission (FTC)
Federal regulatory agency
Plaintiff and enforcer in the settlement

The United States consumer protection and antitrust agency that enforces laws against deceptive business practices, including unauthorized data sharing.
Match Group
Match Group
Public corporation (NASDAQ: MTCH)
Defendant; settled without admitting or denying wrongdoing

The parent company of OkCupid, Tinder, Hinge, and other dating platforms, operating one of the world's largest portfolios of dating services.
Clarifai
Clarifai
Private AI company
Recipient of OkCupid user data; shut down the project in 2018

A New York-based artificial intelligence company specializing in computer vision, facial recognition, and image classification.
Corazon Capital
Corazon Capital
Venture capital fund
Investor in Clarifai; co-founded by OkCupid founders

A Chicago-based venture capital fund co-founded by OkCupid creators Sam Yagan and Max Krohn, which invested in Clarifai — creating the financial link that facilitated the data transfer.

Timeline

  1. FTC and Match Group announce settlement over OkCupid data sharing

    Settlement

    The FTC files a complaint and stipulated final order in Dallas federal court. Match Group is barred from future misrepresentations and must submit compliance reports for ten years. No monetary penalty is imposed. The vote is 2-0.

  2. Match Group pays $14 million to settle separate FTC case

    Legal

    Match Group settles a different FTC complaint over deceptive subscription billing and cancellation practices on Match.com.

  3. Federal judge forces Match Group to hand over withheld documents

    Investigation

    After Match Group asserted overbroad attorney-client privilege claims, a federal judge sides with the FTC and orders production of the withheld documents.

  4. Illinois court dismisses Clarifai class action

    Legal

    A judge dismisses the biometric privacy lawsuit against Clarifai for lack of personal jurisdiction in Illinois.

  5. Class-action lawsuit filed against Clarifai under Illinois biometric law

    Legal

    OkCupid users sue Clarifai under Illinois's Biometric Information Privacy Act for collecting facial geometry without consent.

  6. FTC opens formal investigation

    Investigation

    The FTC issues a Civil Investigative Demand to Match Group, launching a formal probe into the data sharing.

  7. New York Times exposes the data sharing

    Revelation

    The Times reports that Clarifai built a face database from OkCupid images. Zeiler confirms the arrangement. OkCupid publicly denies involvement.

  8. Clarifai shuts down OkCupid photo project

    Corporate

    Clarifai reportedly discontinues the facial recognition project built on OkCupid user images.

  9. Concealment efforts begin

    Cover-up

    The FTC later alleges that Match Group and OkCupid took extensive steps to conceal the data sharing starting in September 2014.

  10. OkCupid funnels user data to Clarifai

    Data Breach

    OkCupid shares nearly three million user photos plus demographic and location data with Clarifai. Co-founder Max Krohn allegedly transfers the images via personal email. No contractual restrictions are placed on Clarifai's use of the data.

  11. Clarifai founded by Matthew Zeiler

    Origin

    Zeiler launches the facial recognition and computer vision startup after placing in the top five of the ImageNet Challenge.

  12. IAC acquires OkCupid for $50 million

    Corporate

    IAC/InterActiveCorp, Match Group's parent, acquires OkCupid. The founders retain roles and connections.

  13. OkCupid founded

    Origin

    Sam Yagan, Max Krohn, Chris Coyne, and Christian Rudder launch OkCupid as a free dating platform.

Scenarios

1

Court approves settlement, Match Group complies quietly for a decade

Discussed by: Legal analysts at National Law Review and Bloomberg Law, who view the settlement terms as standard for FTC consent orders

The Dallas federal court approves the stipulated order. Match Group integrates the compliance requirements into its existing privacy infrastructure, submits annual reports, and the story fades from public attention. This is the most common outcome for FTC consent orders — the company changes practices, the monitoring becomes routine, and enforcement only resurfaces if a violation is detected during the ten-year period.

2

Settlement emboldens broader FTC enforcement against AI training data pipelines

Discussed by: Privacy advocates at the Electronic Frontier Foundation and academic researchers studying AI governance

The FTC uses the Match Group precedent to pursue other companies that fed user data to AI firms without consent. The case becomes a template — not for its penalty (which was minimal) but for its legal theory that sharing data with AI companies violates privacy representations. Other dating apps, social platforms, and consumer services face similar investigations. The absence of a fine, however, limits its deterrent effect.

3

Congress uses the case to push federal privacy legislation

Discussed by: Members of the Senate Commerce Committee and privacy policy organizations that have cited the twelve-year enforcement gap as evidence that the FTC needs stronger tools

Lawmakers point to the case as evidence that the FTC's current enforcement toolkit is insufficient — twelve years from violation to settlement, no monetary penalty, and no individual accountability. The case becomes Exhibit A in hearings on a comprehensive federal privacy law, particularly provisions granting the FTC authority to levy civil fines directly (rather than only on repeat violations) and to hold individual executives liable. Whether legislation materializes depends on broader political dynamics.

4

Match Group faces state-level lawsuits or renewed class actions over the same data sharing

Discussed by: Plaintiffs' attorneys and state attorneys general, particularly in states with biometric privacy laws like Illinois, Texas, and Washington

The FTC settlement does not preempt state enforcement. Attorneys general in states with strong biometric privacy statutes could bring their own cases, as Vermont did against Clearview AI. The earlier Illinois class action against Clarifai was dismissed on jurisdictional grounds, not on the merits — meaning a refiled case in a different venue or against Match Group directly could proceed. State-level fines under laws like Illinois's Biometric Information Privacy Act can reach $5,000 per violation, which at three million photos would represent enormous potential liability.

Historical Context

Facebook and Cambridge Analytica (2018)

March–July 2018

What Happened

In 2018, reports revealed that Cambridge Analytica, a political consulting firm, harvested personal data from up to 87 million Facebook profiles through a third-party quiz app. Facebook had allowed broad data access under its platform policies and was slow to disclose the breach. The company initially minimized the scope of the problem.

Outcome

Short Term

Facebook CEO Mark Zuckerberg testified before Congress. The company's stock dropped by over $100 billion in market value within days.

Long Term

The FTC imposed a $5 billion fine on Facebook in July 2019 — the largest privacy penalty in history. The case reshaped platform data-sharing policies industry-wide and accelerated global privacy regulation, including Europe's enforcement of the General Data Protection Regulation.

Why It's Relevant Today

Both cases involve a platform allowing a third party to access user data under insider relationships, followed by public denial when exposed. The key difference: Facebook's fine was $5 billion; Match Group's is zero — raising questions about whether the FTC's enforcement is scaling to match the severity of violations.

Clearview AI facial recognition lawsuits (2020–2025)

January 2020–March 2025

What Happened

Clearview AI scraped billions of photos from social media platforms and the open web to build a facial recognition database sold to law enforcement and private companies. The American Civil Liberties Union (ACLU) sued under Illinois's Biometric Information Privacy Act. Multiple countries and U.S. states launched enforcement actions.

Outcome

Short Term

In 2022, the ACLU reached a settlement banning Clearview from selling its database to most private entities and Illinois government bodies for five years.

Long Term

In March 2025, a federal judge approved a class-action settlement granting affected users a 23% equity stake in Clearview AI, valued at roughly $51.75 million. The case established that mass collection of facial data without consent carries real legal consequences.

Why It's Relevant Today

Clearview scraped public photos; OkCupid handed over private ones. Both fed images to facial recognition systems without user knowledge. The Clearview cases produced meaningful financial penalties; the OkCupid settlement produced none — highlighting inconsistency in how facial recognition data misuse is penalized depending on the enforcement venue.

FTC bans Rite Aid from using facial recognition (2023)

December 2023

What Happened

The FTC ordered Rite Aid, a national pharmacy chain, to stop using artificial intelligence-powered facial recognition surveillance in its stores for five years. The agency found the system produced false matches that disproportionately flagged Black, Latino, and Asian customers as shoplifters, leading to humiliating confrontations with employees and security guards.

Outcome

Short Term

Rite Aid was required to delete all collected images and any algorithms derived from them. The order was the FTC's first enforcement action explicitly targeting biased AI surveillance.

Long Term

The case established that the FTC views AI systems trained on improperly collected data as a remediable harm — not just the collection itself, but the downstream tools built from it.

Why It's Relevant Today

The Rite Aid order required deletion of both data and derived algorithms. The Match Group settlement does not appear to require Clarifai to delete the facial recognition models trained on OkCupid photos — a gap that may limit the settlement's practical impact on the AI systems the data helped build.

Sources

(6)
Federal Trade Commission Investing.com (via Reuters) National Law Review Bloomberg Law MediaPost Motley Fool