WASHINGTON – The Federal Trade Commission announced March 30, 2026, that it has taken enforcement action against OkCupid and its affiliate Match Group Americas for allegedly deceiving users by sharing personal information, including nearly three million user photos, demographic data and location information, with an unrelated third party in violation of the app’s privacy promises.
OkCupid, operated by Dallas-based Humor Rainbow, Inc., and Match Group Americas, which provides services for Humor Rainbow, reached a proposed settlement with the FTC. The agreement prohibits the companies from misrepresenting their privacy policies and requires ongoing compliance measures.
In a federal complaint filed in the U.S. District Court for the Northern District of Texas, Dallas Division, the FTC alleged that OkCupid shared user data with a third party that had no formal business relationship with the company. The sharing occurred despite OkCupid’s privacy policy stating that personal information would not be shared with others except as indicated in the policy or when users were informed and given an opportunity to opt out.
The policy at the time specified sharing might occur with service providers, business partners or other entities within its family of businesses, or when consumers received notice and the chance to opt out. The FTC alleged the third party did not qualify under any of those categories and that OkCupid provided access without informing users or allowing opt-out.
The third-party recipient sought large datasets of OkCupid user photos and related information because OkCupid’s founders were financial investors in the company. No formal or contractual restrictions were placed on how the information could be used, according to the complaint. The data sharing involved photos along with demographic and geolocation details.
The FTC also alleged that since September 2014, Match and OkCupid took extensive steps to conceal the sharing, including efforts to obstruct the FTC’s investigation and public denials. When a news story revealed the third party had obtained OkCupid datasets, the company claimed to media and users that it was not involved.
Christopher Mufarrige, director of the FTC’s Bureau of Consumer Protection, stated, “The FTC enforces the privacy promises that companies make. We will investigate, and where appropriate, take action against companies that promise to safeguard your data but fail to follow through—even if that means we have to enforce our Civil Investigative Demands in court.”
Under the proposed stipulated final order, OkCupid and Match are permanently prohibited from misrepresenting or assisting others in misrepresenting the extent to which they collect, maintain, use, disclose, delete or protect personal information such as photos and demographic and geolocation data; the purpose for which they collect, maintain, use or disclose such data; and the function of privacy controls provided to consumers, any consumer choices under state privacy laws, or other mechanisms to limit or manage data processing.
The Commission vote authorizing the filing was 2-0. The stipulated final order has the force of law once approved and signed by the district court judge. Lead staff attorneys were Sarah Choi and Alejandro Rosenberg.
The action follows the FTC’s successful enforcement of a Civil Investigative Demand in federal court that required OkCupid to provide requested information.
Dating apps remain popular in Southern Maryland, where residents in St. Mary’s, Calvert and Charles counties use platforms such as OkCupid to connect with others. The settlement serves as a reminder for users to review privacy policies carefully and understand how their personal data may be handled.
The FTC noted that the complaint was filed because the agency had reason to believe the defendants were violating or were about to violate the law and that a proceeding was in the public interest.
This case highlights ongoing federal scrutiny of data practices by major technology and dating companies. No monetary penalties were announced in the proposed settlement, which focuses on injunctive relief and compliance certification.
