Article By David Lindfield
Nearly three million OkCupid users uploaded photos expecting them to remain on a dating platform. Instead, those images were transferred to an artificial intelligence company and used to train facial recognition systems, without user consent, according to federal regulators.
The Federal Trade Commission announced a settlement with Match Group, OkCupid’s parent company, over the data transfer.
The agency said the company had violated its own privacy policies and had concealed it for years.
Founders Allegedly Bypassed Oversight to Share User Data
According to the FTC, the data transfer dates back to September 2014, when Clarifai, an AI firm developing image recognition technology, requested a large dataset of user photos.
Rather than going through standard legal or business review channels, OkCupid executives, including its president and chief technology officer, were directly involved in handing over the data.
The transfer reportedly occurred without a formal contract or restrictions on how the information could be used.
At the time, OkCupid’s privacy policy stated that personal data would not be shared with third parties except under specific conditions or with user consent.
Regulators say neither applied in this case.
The FTC alleged the decision was influenced by financial ties, as OkCupid’s founders had invested in Clarifai.
Data Used to Build Facial Recognition Technology
Clarifai later confirmed that the images were used to develop systems capable of identifying characteristics such as age, sex, and race from facial data.
Photos originally uploaded for dating profiles were effectively repurposed as training material for technology that could be deployed across industries, including law enforcement and government use.
When the arrangement was first reported publicly in 2019, OkCupid acknowledged contact with Clarifai but said no commercial agreement had been reached.
The FTC later described that response as incomplete, noting the absence of any disclosure about how the data was actually used.
FTC Alleges Years of Concealment
The FTC said it was forced to take additional legal steps after encountering resistance during its investigation.
Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection, emphasized the agency’s role in enforcing corporate data practices.
“The FTC enforces the privacy promises that companies make,” Mufarrige said.
“We will investigate, and where appropriate, take action against companies that promise to safeguard your data but fail to follow through,” he added.
OkCupid spokesperson Michael Kaye said the company’s current practices differ from those described in the case.
“The alleged conduct at issue does not reflect how OkCupid operates today,” Kaye said.
“Over the years, we have further strengthened our privacy practices and data governance to ensure we meet the expectations of our users,” he added.
Settlement Imposes Oversight but No Financial Penalty
The settlement, filed March 30, 2026, in federal court in Texas, places Match Group under a long-term compliance framework and prohibits the company from misrepresenting its data collection and sharing practices.
However, the agreement does not include a financial penalty, nor does it require deletion of the data already transferred to Clarifai. Match Group also did not admit wrongdoing as part of the settlement.
The FTC’s decision has raised broader questions about accountability in data privacy enforcement, particularly in cases involving large-scale data transfers and emerging technologies.
Be the first to comment