FTC resolves OkCupid data controversy without imposing a fine.

FTC resolves OkCupid data controversy without imposing a fine.

      The AI company obtained photos from OkCupid in 2014 without user consent, violating OkCupid’s privacy policy during the data transfer. The Federal Trade Commission (FTC) reached a settlement with OkCupid and Match Group in late March without imposing any financial penalties, and Clarifai was not found to have committed any wrongdoing.

      Clarifai, a facial recognition AI company based in Delaware, confirmed it has erased around three million user photos from OkCupid as well as the facial-recognition models that were developed using those images, following the FTC's settlement with the dating platform concerning the 2014 privacy breach. According to a document reviewed by Reuters, Clarifai notified the FTC on April 7, 2026, about the deletion and informed US Representative Lori Trahan on April 16 that it had removed all models trained on that data and had not shared it with any third parties.

      This incident dates back more than a decade, as the founders of OkCupid were investors in Clarifai, and Clarifai's founder, Matthew Zeiler, reached out to OkCupid co-founder Maxwell Krohn in 2014 to request access to their data. "We’re collecting data now and just realized that OKCupid must have a HUGE amount of awesome data for this," Zeiler wrote, according to court documents referenced by Reuters.

      OkCupid provided nearly three million user photos along with location and demographic information without any formal agreement, restrictions on data usage, or notifications to users, nor did it allow them to opt out. At that time, OkCupid’s privacy policy clearly stated it would not share personal information outside a specific set of business relationships, none of which included Clarifai.

      The FTC initiated its investigation following a 2019 New York Times article, but it took years to reach a settlement. The proposed consent order, revealed on March 30, 2026, prohibits OkCupid and its parent company Match Group, which also runs Tinder, from misrepresenting their data practices for the next 20 years. There was no financial penalty involved, as the FTC lacks the authority to impose fines for this kind of violation under Section 5 of the FTC Act. Clarifai was not blamed for any misconduct, having received the data via a request rather than initiating the transfer themselves.

      The settlement faced immediate criticism. Representative Trahan, a Democrat from Massachusetts, called Clarifai’s confirmation of deletion "a step in the right direction," but commented that "the FTC should have never settled for less in the first place." This case marks the first Section 5 privacy enforcement action led by Chair Andrew Ferguson, and legal analysts at Venable have pointed out that, unlike many previous FTC privacy consent orders, this one does not require ongoing compliance programs or affirmative notification obligations from the companies involved.

      The technical nature of the data makes the lack of penalties particularly noteworthy. Clarifai's products include facial recognition systems that can identify individuals and analyze their age, race, and gender from images. The company has partnered with the US military and has received investments from Nvidia. Facial-recognition models developed using intimate social data, such as photos shared on a dating site where individuals expect privacy, pose different risks compared to models built from publicly available images. It remains unclear whether those models still exist in some form within the AI landscape, through third-party licensing or derived models, as Clarifai did not disclose how long the models were active before their deletion.

Other articles

FTC resolves OkCupid data controversy without imposing a fine.

Clarifai removed 3 million photos of OkCupid users and facial-recognition models following a settlement with the FTC, but critics argue that the penalty-free agreement did not go far enough.