Ireland’s Data Protection Commission fined Tinder owner Match Group €11 million over GDPR violations concerning its self-service user data request tool.
Match Group Faces €11 Million Penalty for Data Omissions
- Match Group faces an €11 million penalty after an own-volition inquiry launched in January 2020 found its data access tool omitted crucial analytics categories.
- The company must bring its user data processing into compliance within three months, though payment is delayed pending an appeal to the European Court of Justice.
Data Watchdog Fines Tinder Owner Over Privacy Failures
The Irish Data Protection Commission issued an €11 million penalty against Match Group (NASDAQ: MTCH) following an own-volition inquiry launched in January 2020, as reported by The Journal. Operating as the Lead Supervisory Authority for MTCH, the watchdog examined the mechanics of Tinder’s self-service “Download My Data” tool.
Tens of thousands of users utilized the automated feature to retrieve personal files, according to Irish Examiner reporting. However, regulators determined that the system failed to deliver a complete account of personal information as required under Article 15(3) of the European Union’s General Data Protection Regulation.
“tens of thousands of users used the Download My Data tool during the period of time assessed by the inquiry”, Deputy commissioner Graham Doyle said.
While automated tools do not need to supply an exhaustive physical dossier, they must operate transparently regarding missing data categories. Deputy commissioner Graham Doyle told The Journal that automated access options must remain fair and transparent to individuals regarding the actual extent of information delivered.
Omitted Analytics and Latitude Data
The regulatory review established that specific analytical categories were left out entirely without notifying the user, or were condensed into summary formats. “What you would get is the number of times you swiped left or right on a particular day, the time you logged in, or the number of matches you made in a day”, Data Commissioner Niamh Sweeney told RTÉ.
“But there are other types of data, analytics data that wouldn't have been included, that could include your gender, your latitude or longitude, the city you were logging in from, and other types of data”, Data Commissioner Niamh Sweeney told RTÉ.
In addition to the monetary penalty and an official reprimand, the Data Protection Commission ordered Match Group to alter its software configuration. The company must supply all relevant data and transparently disclose which categories cannot be provided for privacy reasons within a strict three-month window.
Match Group Challenges Ruling in European Court of Justice
Match Group confirmed it will challenge the regulatory ruling, meaning financial settlement will stall while the case moves toward the European Court of Justice. “We have received the DPC’s decision and have decided to appeal,” a Match Group spokesperson said. “Tinder engaged with the DPC throughout this investigation, and we stand behind the privacy protections we’ve built for our users.”
| Enforcement Metric | DPC Statistics |
|---|---|
| Total Fines Issued Since 2021 | €4.5 Billion |
| Total Fines Collected to Date | €20 Million |
| Current Tinder Penalty | €11 Million |
| Expected Court Timeline | 12 to 18 Months |
Commissioner Sweeney said that while the Data Protection Commission has issued nearly €4.5 billion in cumulative penalties since 2021, only €20 million has actually been collected due to prolonged appellate litigation. Regulators anticipate securing a definitive judgment from the European Court in the next 12 to 18 months, which could force outstanding cross-border corporate payments to begin flowing.
Disclaimer: The information provided in this article is for educational and informational purposes only and does not constitute financial advice.
