Ireland's Data Protection Commission (DPC) has fined Match Group, the owner of the dating app Tinder, €11 million over data privacy failures. The DPC launched the inquiry into the Tinder service in 2020 on its own initiative rather than in response to a formal complaint. Because many US tech companies register their European entities in Ireland, the DPC is responsible for enforcing the European Union's General Data Protection Regulation (GDPR).

The investigation focused on a self-service tool known as the "Download My Data" tool, which was presented to users as a way to obtain a copy of their Tinder data. The DPC found that it failed to provide users with all of their personal data, with certain categories of information omitted without notice or provided in summary form only. Deputy commissioner Graham Doyle said "tens of thousands of users" used the tool during the period assessed by the inquiry. He noted that while such automated tools do not need to provide a complete copy of personal data, they must be "fair and transparent to individuals regarding the extent of the data provided".S1

Alongside the fine, the DPC ordered Match Group to bring its processing into compliance within three months. The regulator said it would publish its full decision in due course. Match Group has said it intends to appeal. A company spokesperson said Tinder had engaged with the DPC throughout the investigation and stood behind the privacy protections it has built for its users.S1S2