Irish regulator fines Match Group €11m over incomplete Tinder data downloads
· 1h ago · Originally reported by PPC Land
Ireland's Data Protection Commission fined Match Group €11 million after tens of thousands of Tinder users received copies of their personal data with some categories missing or only summarised. Match Group says it will appeal, and the full decision has not yet been published.
Why it matters
The fine shows regulators are willing to penalise companies not just for misusing data but for failing to give users complete copies of it, a core right under GDPR.
Explain it like I’m new here
It's like asking your school for your full file and getting a version with pages torn out — and the school getting fined for it.
Terms in this story
Related stories
IAB Europe urges regulators to weigh privacy tech in GDPR enforcement
IAB Europe is asking EU regulators to treat privacy-enhancing technologies as a mitigating factor when setting GDPR fines and when assessing legitimate interest. The argument: tools like cryptography can reduce privacy risk enough to…
Role-Based Access Control Defined for Ad Accounts and DSPs
Role-based access control (RBAC) is a security model that grants system permissions based on job roles rather than individual users. This approach is currently the standard model for managing user access within advertising accounts and…
Apple's German ATT settlement lets apps re-prompt users who previously declined tracking
Apple reached an agreement in Germany that allows apps to show a fresh App Tracking Transparency prompt to users who previously declined tracking. The seven-year terms also prohibit fees for IDFA access and set a 15-working-day App Review…
Samsung's Gemini glasses launch Dec 10 with ad-targeting limits on camera data
Samsung's Gemini-powered smart glasses go on sale December 10 in the US starting at $395. Camera images captured across 30 frames are excluded from ad targeting and AI training, but voice requests carry no equivalent written commitment on…
Agent Identity: Verifiable Credentials for AI Agents Explained
Agent identity refers to giving AI agents a verifiable name, credential and permission set so websites and systems can identify who operates them and what actions they are allowed to take. The concept addresses how autonomous software…
RIPD guidance bars vendors from using client data for AI training by default
The RIPD has issued guidance stating that vendors may not use client data to train AI models unless clients explicitly opt in. Data inferred by AI about health, beliefs or sexual orientation is treated as sensitive, with implications for…