FTC settles OkCupid facial recognition data case without fine

OkCupid and Match Group have agreed to a Federal Trade Commission settlement over the sharing of nearly three million user photos and other data with Clarifai, a company that sells facial-recognition services to government and commercial clients. The deal, filed in US District Court for the Northern District of Texas, imposes behavioural restrictions but no financial penalty, according to Ars Technica.

The alleged conduct dates back to 2014, but the enforcement outcome is current—and it signals what regulators are willing to tolerate. The FTC said OkCupid provided Clarifai access not only to user photos but also location and other information, without “formal or contractual restrictions” on how the data could be used. The agency also said users were not informed or given the chance to opt out, despite privacy-policy language promising notice and an opt-out opportunity.

A fine-free settlement matters because it sets expectations for the next platform deciding whether to treat user data as a tradable asset. The upside of sharing large photo datasets is immediate—better machine-learning models, partnerships, and product claims. The downside is supposed to be enforcement risk. When the sanction is limited to a promise not to misrepresent future conduct, the penalty starts to look like paperwork: revise disclosures, tighten internal governance, and move on.

Ars Technica notes that the FTC has been run entirely by Republicans since President Trump fired both Democratic commissioners. The agency is also operating in the shadow of court decisions that have constrained some of its in-house enforcement tools, though the FTC can still bring deception cases in federal court. In practice, the path of least resistance is visible in the settlement itself: the government can claim a privacy win, the company can claim closure, and neither side has to price the harm.

The case also shows how consumer platforms feed security-adjacent industries. Clarifai markets AI services to “military, civilian, intelligence, and government” customers, the FTC said. A dating app’s photo database becomes training material for systems that can identify faces and infer attributes—capabilities that are costly to build from scratch and politically sensitive when sourced directly from the state.

Match said it was pleased to settle “with no monetary penalty,” and did not admit wrongdoing.

The FTC’s filing describes three million faces leaving the app. The settlement describes what happens next: a prohibition on saying it will not happen again.