Consumers Affected
3,000,000
The FTC settled with Humor Rainbow, Inc. (operator of OkCupid) and Match Group Americas over allegations that OkCupid deceived users by sharing personal data including photos and location information with an unauthorized third party, contrary to its privacy policy promises to inform users and provide opt-out opportunities. The settlement permanently prohibits the companies from misrepresenting their data collection, use, disclosure, and privacy control practices. No monetary penalty was imposed.
The companies are permanently enjoined from misrepresenting any aspects of their personal data collection, use, disclosure, protection, or deletion practices, the purpose of such processing, or the functionality of their privacy controls and consumer options under state privacy laws. No monetary penalty was imposed.
In-house legal teams should review data processing and sharing clauses in vendor, customer, and partner agreements to ensure they align with public privacy policy promises, particularly regarding third-party data sharing and opt-out rights. Vendor agreements must include explicit restrictions on how shared user data (including photos, geolocation, and demographic information) can be used, and require third parties to notify the company of any data use changes. Customer-facing privacy policies and associated terms of service should be audited to confirm that all representations about data sharing, opt-out mechanisms, and privacy controls are accurate and implemented in practice. Additionally, agreements with affiliates and investors should prohibit unauthorized data sharing based on non-business relationships, and include breach notification clauses requiring prompt disclosure of any unauthorized data disclosures.
Entity
Humor Rainbow, Inc. and Match Group Americas
Industry
Social MediaOfficial Press Release
https://www.ftc.gov/news-events/news/press-releases/2026/03/ftc-takes-action-against-match-okcupid-deceiving-users-sharing-personal-data-third-party
OkCupid MatchComplaint
https://www.ftc.gov/system/files/ftc_gov/pdf/OkCupid-MatchComplaint.pdf
MatchGroupAmericasandHumorRainbowStipulatedOrder
https://www.ftc.gov/system/files/ftc_gov/pdf/MatchGroupAmericasandHumorRainbowStipulatedOrder.pdf
Federal Trade Commission Enforcement Page
https://www.ftc.gov/enforcement
"March 30, 2026"
"OkCupid, operated by Dallas-based Humor Rainbow, Inc., and Match Group Americas, which provides services for Humor Rainbow, will be prohibited from misrepresenting its privacy policies."
"As part of a settlement, OkCupid, operated by Dallas-based Humor Rainbow, Inc., and Match Group Americas, which provides services for Humor Rainbow, will be prohibited from misrepresenting its privacy policies."
"OkCupid gave an unauthorized third party access to the personal data of millions of OkCupid users in violation of its privacy policies."
"its privacy policy at the time claimed it may share personal information with service providers, business partners, other entities within its family of businesses or when it informed consumers about such data sharing and gave consumers the chance to opt out. Despite these promises, OkCupid shared users’ personal data with a third party—even though it was not a service provider, business partner, or family affiliate—and did not inform consumers or give them the chance to opt out of such sharing."
"sharing their personal information, including photos and location information, with an unrelated third party"
$49.8M
The FTC and four states alleged that Progress Residential and Pretium Partners misled renters about rental prices and fees, improperly withheld security deposits, and engaged in other unlawful conduct. Under a proposed settlement, the companies will pay $49.75 million and must change their pricing, deposit, and customer-service practices.
The FTC and 22 state attorneys general filed an updated complaint alleging that Amazon secretly added surcharges to advertising auction prices and misled advertisers about the reasons for price increases. The release describes newly unredacted allegations; it does not report a judgment, settlement, or monetary penalty.
$600K
The FTC and Washington alleged that Riverside Payments and affiliates misrepresented savings and cancellation terms, concealed fees and auto-renewing contracts, and obtained consumers’ financial information using false or fraudulent statements. The proposed stipulated order requires a $600,000 payment, customer notice and a period to rescind agreements without penalty, and prohibits deceptive claims while requiring clear disclosures, informed consent for negative-option billing, and a simple cancellation method.
FTC staff announced warning letters to 25 healthcare plan marketers and lead generators about deceptive or unfair claims concerning plan benefits, coverage, costs, and enrollment incentives. The letters do not allege wrongdoing by their recipients or impose penalties; they encourage companies to review their advertisements for compliance.
The FTC summarized enforcement actions and other efforts targeting businesses and individuals allegedly impersonating government agencies or legitimate businesses. The release reports more than $80 million in consumer redress across prior actions and takedowns of 19 websites, but it does not announce a new settlement or impose a specific penalty.
The FTC and state and local co-plaintiffs filed a lawsuit alleging Toast imposed hidden and unauthorized fees, enrolled restaurants in add-ons without consent, obstructed subscription cancellations, and misrepresented customer support availability. The complaint is pending in federal court; the press release announces no monetary penalty or imposed remedy.