The U.S. Federal Trade Commission (FTC) has accused dating platform OkCupid of sharing nearly three million user photos with Clarifai, a facial recognition technology company, in a 2014 data transfer that lacked user consent or formal agreements. The FTC alleges that Humor Rainbow, the company behind OkCupid, provided not only photos but also demographic and location data to Clarifai despite making public claims that it did not share user information. The agency claims these actions violated consumer privacy and constituted deceptive business practices.
Key Details
According to the FTC complaint, Clarifai’s CEO emailed an OkCupid co-founder in September 2014 requesting access to a large dataset of user photos to train facial recognition algorithms. Despite no commercial relationship between the firms, the request was granted due to overlapping financial interests—several OkCupid founders, including Humor Rainbow’s president and Match Group’s CEO, had invested in Clarifai. Humor Rainbow’s top executives directly facilitated the transfer of photos and personal data, with no contractual safeguards or restrictions on how the data could be used.
Clarifai used the OkCupid images to develop technology capable of identifying a face’s age, sex, and race, CEO Matt Zeiler confirmed in a 2019 interview with The New York Times. Zeiler reportedly said the company was open to selling its facial recognition tools to foreign governments, military, and law enforcement agencies under the right conditions. At the time, OkCupid maintained it had no commercial agreement with Clarifai and denied any ongoing relationship, though it did not address whether data had been shared informally.
"Any implication that OkCupid released users’ information to [the Data Recipient] is false," Humor Rainbow stated publicly, according to the FTC.
What This Means
The case highlights ongoing concerns about informal data sharing among tech executives with overlapping affiliations, particularly in the absence of regulatory oversight. While no fine was imposed under the proposed settlement, the FTC’s action underscores the risks of unregulated data transfers, especially when sensitive biometric information is involved. This incident predates major privacy regulations like the GDPR and the California Consumer Privacy Act, which now impose stricter requirements on data sharing.
The FTC’s findings may prompt renewed scrutiny of how startups and venture-backed firms handle user data when personal and financial interests intersect. As facial recognition technology becomes more widespread, regulators are increasingly focused on how training data is sourced and whether users are aware of its use. The OkCupid case serves as a cautionary example of how early-stage tech collaborations can breach ethical and legal boundaries.
Looking ahead, the FTC is expected to emphasize stronger enforcement of data transparency, particularly for companies handling biometric information. With public trust in digital platforms under strain, this case may influence future legislation aimed at preventing covert data sharing among affiliated executives and startups.