OkCupid Settles FTC Case Over Unauthorized Sharing of User Photos with AI Firm

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

OkCupid and parent company Match Group settled with the FTC after sharing nearly three million user photos and data with facial recognition firm Clarifai in 2014 without user consent, violating privacy policies. The settlement prohibits misrepresentation of data practices and requires compliance certification, highlighting AI-related privacy risks.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event describes the use of facial recognition technology, which is an AI system, to process user data without consent, leading to a violation of privacy rights and breach of legal obligations. This constitutes harm under the category of violations of human rights or breach of applicable law protecting fundamental rights. Since the harm has already occurred and the settlement addresses this misuse, this qualifies as an AI Incident.[AI generated]
AI principles
Privacy & data governanceTransparency & explainability

Industries
Consumer servicesDigital security

Affected stakeholders
Consumers

Harm types
Human or fundamental rights

Severity
AI incident

AI system task:
Recognition/object detection


Articles about this incident or hazard

Thumbnail Image

Match Group settles US FTC claims it illegally shared OkCupid user data

2026-03-30
Reuters
Why's our monitor labelling this an incident or hazard?
The event describes the use of facial recognition technology, which is an AI system, to process user data without consent, leading to a violation of privacy rights and breach of legal obligations. This constitutes harm under the category of violations of human rights or breach of applicable law protecting fundamental rights. Since the harm has already occurred and the settlement addresses this misuse, this qualifies as an AI Incident.
Thumbnail Image

OkCupid settles claims it shared user photos with a facial recognition company

2026-03-31
The Verge
Why's our monitor labelling this an incident or hazard?
The event clearly involves an AI system (facial recognition technology) and concerns the use of personal data without consent, which constitutes a violation of privacy rights, a breach of obligations under applicable law protecting fundamental rights. The sharing of biometric data without consent is a direct violation of user rights and privacy, thus qualifying as harm under the framework. Since the harm (privacy violation) has already occurred and led to regulatory action, this qualifies as an AI Incident rather than a hazard or complementary information.
Thumbnail Image

Match Group settles US FTC claims it illegally shared OkCupid user data

2026-03-30
CNA
Why's our monitor labelling this an incident or hazard?
The event describes an AI Incident because the use of facial recognition technology (an AI system) to process user data without consent led to a violation of users' privacy rights, constituting harm under the framework. The FTC lawsuit and settlement confirm that harm occurred due to the AI system's use. Therefore, this is classified as an AI Incident rather than a hazard or complementary information.
Thumbnail Image

FTC doesn't fine OkCupid for sharing users' personal data

2026-03-31
Mashable
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI company (Clarifai) receiving unauthorized personal data from OkCupid, which is an AI system context since Clarifai is an AI company likely using the data for AI model development. The FTC's complaint highlights violations of privacy policies and user rights, which are legal protections and fundamental rights. The harm is realized as personal data was shared without consent, constituting a breach of obligations under applicable law protecting fundamental rights. The FTC's enforcement action and settlement focus on preventing future misrepresentations and mishandling of user data, confirming the seriousness of the incident. Although no financial fine was imposed, the event meets the criteria for an AI Incident because the AI system's use (Clarifai's AI) is directly linked to the harm caused by unauthorized data sharing.
Thumbnail Image

OkCupid gave 3 million dating-app photos to facial recognition firm, FTC says

2026-03-31
Ars Technica
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system—facial recognition technology—that was developed and used with data obtained from OkCupid users without their informed consent. This unauthorized sharing of personal data, including photos and location information, constitutes a violation of privacy rights and legal obligations, fulfilling the criteria for harm under the framework. The FTC's involvement and settlement further confirm the recognition of this harm. Although no financial penalty was imposed, the permanent prohibition against misrepresenting data use underscores the seriousness of the incident. Hence, this is an AI Incident due to the direct link between the AI system's use and the violation of fundamental rights and legal protections.
Thumbnail Image

OkCupid settles FTC case on alleged misuse of its users' personal data

2026-03-30
engadget
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (Clarifai's AI-powered facial recognition and content moderation software) that was used to process personal data shared without user consent, constituting a violation of privacy rights. The misuse of personal data and lack of user consent represent a breach of obligations intended to protect fundamental rights. The FTC lawsuit and settlement confirm that harm occurred due to the AI system's involvement. Hence, this is an AI Incident rather than a hazard or complementary information.
Thumbnail Image

OkCupid to pay no fee to FTC for allegedly sharing 2M+ user photos with third-party AI company

2026-03-30
The Dallas Morning News
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (Clarifai's image identification and analysis AI) that was developed and used with improperly obtained personal data from OkCupid users, violating privacy policies and FTC rules. This misuse of personal data constitutes a violation of users' rights, fulfilling the criteria for harm under the AI Incident definition (violation of human rights and breach of legal obligations). The FTC complaint and settlement confirm the harm occurred, even though no monetary penalty was imposed. Hence, the event is best classified as an AI Incident rather than a hazard or complementary information.
Thumbnail Image

FTC says OkCupid shared user data with AI firm, then tried to cover it up

2026-03-31
Houston Chronicle
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI company (Clarifai) receiving user data from OkCupid without proper consent, violating privacy policies and user rights. The FTC's action confirms that harm has occurred through unauthorized data sharing, which is a breach of legal obligations protecting user privacy. Since the AI system's involvement (Clarifai's AI services) directly relates to the misuse of personal data, this constitutes an AI Incident under the framework's definition of violations of human rights or legal obligations.
Thumbnail Image

Match, OkCupid Settle FTC Suit Over Info Sharing With AI Co. - Law360

2026-03-31
law360.com
Why's our monitor labelling this an incident or hazard?
The sharing of personal data, including photos, with an AI facial recognition company without user opt-out consent directly breaches privacy rights and legal frameworks protecting user data. The involvement of an AI system (facial recognition technology) in this unauthorized data sharing has led to legal action, indicating realized harm in terms of rights violations. Therefore, this event qualifies as an AI Incident due to the direct link between AI system use and harm to users' rights.
Thumbnail Image

FTC order bars OkCupid from misleading users about biometric data sharing | Biometric Update

2026-03-31
Biometric Update
Why's our monitor labelling this an incident or hazard?
The event clearly involves an AI system (facial recognition software by Clarifai) and its use in processing biometric data from OkCupid users. The unauthorized sharing of biometric data constitutes a violation of privacy rights and legal obligations, which is a breach of applicable law protecting fundamental rights. The FTC's enforcement action and settlement indicate that harm has occurred due to deceptive practices related to AI-driven biometric data use. Therefore, this qualifies as an AI Incident because the AI system's use directly led to violations of rights and harm to users' privacy.
Thumbnail Image

OKCupid Gave Users' Photos To Facial Recognition Company, FTC Charges

2026-03-30
MediaPost
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (facial recognition by Clarifai) that was used with personal data obtained without user consent, violating privacy rights and legal obligations. The FTC complaint details that users were deceived and their data shared without opt-out options, constituting a breach of fundamental rights. This is a direct harm linked to the use of an AI system, meeting the criteria for an AI Incident under violations of human rights and legal obligations. The settlement and legal proceedings further confirm the seriousness of the harm.
Thumbnail Image

If You Have These Dating Apps In Iowa Or Illinois, Your Pictures May Be Leaked

2026-03-31
104.5 KDAT
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (Clarifai's AI-based image recognition technology) processing personal data leaked without consent, constituting a breach of privacy rights. The unauthorized data sharing and the company's failure to inform users or allow opt-out directly led to harm in the form of privacy violations. Therefore, this qualifies as an AI Incident due to the realized harm linked to the AI system's use of leaked data.
Thumbnail Image

OkCupid Reaches Settlement Over Allegations of Sharing User Photos with Facial Recognition Firm - Internewscast Journal

2026-03-31
Internewscast Journal
Why's our monitor labelling this an incident or hazard?
The facial recognition system is an AI system processing biometric data. OkCupid's sharing of nearly three million user photos without opt-out consent constitutes a violation of privacy rights and legal obligations. This is a direct harm related to the use of an AI system, qualifying as an AI Incident under the framework's definition of violations of human rights or breach of legal obligations protecting fundamental rights.
Thumbnail Image

Match Group Settles FTC Case Over OkCupid Data Sharing With Facial Recognition Firm

2026-03-31
quiverquant.com
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (facial recognition technology) processing personal data shared without proper disclosure, violating privacy rights and legal obligations. The FTC lawsuit and settlement confirm that the AI system's use of data led to a breach of user rights, fulfilling the criteria for an AI Incident. The harm is a violation of human rights and legal obligations related to data privacy, directly linked to the AI system's use.
Thumbnail Image

FTC levies no fines after dating site caught giving AI company user data

2026-03-30
Straight Arrow News
Why's our monitor labelling this an incident or hazard?
The event describes a clear violation of user privacy rights through unauthorized sharing of personal data with an AI company using facial recognition technology. This constitutes a breach of legal obligations protecting fundamental rights, fulfilling the criteria for an AI Incident. The AI system's involvement is explicit and directly linked to the harm (privacy violation). The FTC's enforcement action and settlement further confirm the materialized harm. Although no fines were imposed, the harm and AI involvement are evident and significant.
Thumbnail Image

OkCupid settles FTC case over user data sharing

2026-03-30
AllToc
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (facial recognition technology) and concerns the use and sharing of personal data without proper consent, which is a violation of privacy rights and consumer protection laws. However, the article does not report actual harm occurring to users but rather a legal enforcement action addressing past improper data sharing. Therefore, it does not qualify as an AI Incident (no direct or indirect harm reported) or an AI Hazard (no plausible future harm described). Instead, it is best classified as Complementary Information because it provides important context on regulatory responses and compliance issues related to AI systems and data privacy.
Thumbnail Image

FTC: OkCupid Shared 3 Million Dating-App Photos with Facial Recognition Firm

2026-03-31
El-Balad.com
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (facial recognition technology) that was used to process a large dataset of user photos shared without consent, leading to a breach of privacy rights. The FTC complaint highlights false and misleading claims about data handling and unauthorized data sharing, which are violations of legal and fundamental rights. The harm is realized as users' personal data was shared and potentially misused, fulfilling the criteria for an AI Incident. The involvement of AI in the form of facial recognition technology and the direct link to harm through privacy violations justifies this classification.
Thumbnail Image

OkCupid, Match Group settle with FTC over unlawful data sharing with AI firm

2026-03-31
SC Media
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI solutions firm receiving sensitive user data from OkCupid without consent, which is a violation of user privacy and data protection laws, thus breaching fundamental rights. The AI system's use in processing this data is central to the harm caused. The FTC's legal action confirms the seriousness of the violation. Hence, this is an AI Incident as the AI system's use directly led to a breach of obligations intended to protect fundamental rights.
Thumbnail Image

OkCupid, affiliate Match gave millions of users' photos to AI facial recognition company, FTC says

2026-04-01
The Cool Down
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (Clarifai's facial recognition software) that was given unauthorized access to sensitive personal data, including photos, which are biometric identifiers. The misuse of this data breaches privacy rights and legal obligations, constituting harm under the framework's category of violations of human rights or breach of legal protections. The FTC's complaint and settlement confirm that harm has occurred through misrepresentation and unauthorized data sharing. The AI system's role is pivotal as it processes the biometric data, and the incident directly results from its unauthorized use. Hence, this is classified as an AI Incident rather than a hazard or complementary information.