Key facts
- The Irish DPC said Tinder's tool omitted certain categories of personal data or gave users only a summary.
- Match Group was fined €11 million, reprimanded and ordered to comply with the GDPR within three months.
- Deputy Commissioner Graham Doyle said automated access tools must be fair and transparent about the extent of data provided.
- A Match Group spokesperson said Tinder engaged with the DPC throughout and the company stands behind its privacy protections.
Ireland's Data Protection Commission fined Match Group, the owner of Tinder, €11 million on November 13, 2026, saying the dating app failed to give users a full copy of their personal data when they requested it. The regulator also issued a reprimand and ordered the company to bring its data processing into compliance with the EU's General Data Protection Regulation within three months.
The decision followed an inquiry the DPC opened in January 2020 into whether Tinder's "Download My Data" tool complied with the GDPR. The regulator said the tool failed to provide users with all of their personal data, that certain categories of information were omitted, and that in some cases users were given only a summary of their data. The GDPR gives people a right to access the personal data a company holds about them.
Graham Doyle, Deputy Commissioner at the Irish DPC, said automated access tools "can be a useful and efficient way" to give people access to their personal data, but they "must be fair and transparent to individuals regarding the extent of the data provided."
A Match Group spokesperson said the company will appeal: "Tinder engaged with the DPC throughout this investigation, and we stand behind the privacy protections we've built for our users."
