Consumers Affected
3,000,000
The FTC settled with Humor Rainbow, Inc. (operator of OkCupid) and Match Group Americas over allegations that OkCupid deceived users by sharing personal data including photos and location information with an unauthorized third party, contrary to its privacy policy promises to inform users and provide opt-out opportunities. The settlement permanently prohibits the companies from misrepresenting their data collection, use, disclosure, and privacy control practices. No monetary penalty was imposed.
The companies are permanently enjoined from misrepresenting any aspects of their personal data collection, use, disclosure, protection, or deletion practices, the purpose of such processing, or the functionality of their privacy controls and consumer options under state privacy laws. No monetary penalty was imposed.
In-house legal teams should review data processing and sharing clauses in vendor, customer, and partner agreements to ensure they align with public privacy policy promises, particularly regarding third-party data sharing and opt-out rights. Vendor agreements must include explicit restrictions on how shared user data (including photos, geolocation, and demographic information) can be used, and require third parties to notify the company of any data use changes. Customer-facing privacy policies and associated terms of service should be audited to confirm that all representations about data sharing, opt-out mechanisms, and privacy controls are accurate and implemented in practice. Additionally, agreements with affiliates and investors should prohibit unauthorized data sharing based on non-business relationships, and include breach notification clauses requiring prompt disclosure of any unauthorized data disclosures.
Entity
Humor Rainbow, Inc. and Match Group Americas
Industry
Social MediaOfficial Press Release
https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-takes-action-against-match-okcupid-deceiving-users-sharing-personal-data-third-party
OkCupid MatchComplaint
https://www.ftc.gov/system/files/ftc_gov/pdf/OkCupid-MatchComplaint.pdf
MatchGroupAmericasandHumorRainbowStipulatedOrder
https://www.ftc.gov/system/files/ftc_gov/pdf/MatchGroupAmericasandHumorRainbowStipulatedOrder.pdf
Federal Trade Commission Enforcement Page
https://www.ftc.gov/enforcement
"March 30, 2026"
"OkCupid, operated by Dallas-based Humor Rainbow, Inc., and Match Group Americas, which provides services for Humor Rainbow, will be prohibited from misrepresenting its privacy policies."
"As part of a settlement, OkCupid, operated by Dallas-based Humor Rainbow, Inc., and Match Group Americas, which provides services for Humor Rainbow, will be prohibited from misrepresenting its privacy policies."
"OkCupid gave an unauthorized third party access to the personal data of millions of OkCupid users in violation of its privacy policies."
"its privacy policy at the time claimed it may share personal information with service providers, business partners, other entities within its family of businesses or when it informed consumers about such data sharing and gave consumers the chance to opt out. Despite these promises, OkCupid shared users’ personal data with a third party—even though it was not a service provider, business partner, or family affiliate—and did not inform consumers or give them the chance to opt out of such sharing."
"sharing their personal information, including photos and location information, with an unrelated third party"
The FTC issued a policy statement abandoning disparate-impact liability, stating it will no longer bring claims based on this theory. It also modified compliance obligations for several companies based on past decisions.
The FTC, along with Utah and California, filed a complaint against Hims & Hers alleging the telehealth provider shared consumers' sensitive health information with third-party advertising platforms without consent, and deceived consumers about billing and cancellation practices. The complaint alleges violations of the FTC Act and the Restore Online Shoppers' Confidence Act.
$300K
The FTC alleged that Elite Events and Tickets LLC, doing business as Smart Scalpers, violated the Better Online Ticket Sales Act by circumventing security measures to bypass ticket purchase limits for over 2,400 events, reselling tickets at a profit. The proposed order requires payment of $300,000 (with a total penalty of $10.7 million partially suspended) and permanently prohibits the company and its owners from engaging in such circumvention tactics.
$45.9M
The FTC permanently banned Dennise Merdjanian from the debt relief industry and telemarketing after she and Superior Servicing LLC allegedly ran a student loan forgiveness scam that took more than $45.9 million from consumers. The proposed stipulated order imposes a partially suspended monetary judgment and resolves the FTC's litigation against the remaining defendants.
$16.5M
The FTC charged the founders of Celsius Network with deceiving consumers by falsely promising that cryptocurrency deposits were safe and always available. The founders agreed to pay $16.5 million and are banned from marketing or selling products that can be used to deposit or withdraw assets, among other restrictions.
$750K
The FTC finalized a settlement with Vanilla Chip LLC (doing business as TruHeight) and its principals over allegations that they deceptively advertised height-enhancing supplements for children and teenagers without competent and reliable scientific evidence. The FTC also alleged that TruHeight used fake social media bot profiles and relied on reviews written by employees, vendors, or consumers who received free products or discounts for 5-star reviews. Under the final order, TruHeight must pay $750,000 and is barred from making unsupported health claims or misrepresenting reviews.