Irish regulator fines Tinder owner Match Group €11 million over data access

The decision

The Irish Data Protection Commission (DPC) fined Match Group €11 million on Friday, 13 November 2026, for failing to give Tinder users a complete copy of their personal data when they asked for it. The regulator also issued a reprimand and ordered the company to bring its data processing into line with the GDPR within three months. Match Group, the US-based parent of the dating app, faces the fine through its Irish subsidiary, with the DPC acting as lead supervisory authority under the regulation. The regulator tied the sanction to Article 15(3) of the GDPR, which governs the right of access to personal data. Match Group has said it will appeal the decision.

What the tool missed

The DPC examined a self-service feature called Download My Data, which Tinder presented to users as a way to obtain a copy of their Tinder data. According to the regulator, the feature left out certain categories of information without telling the user, while other data arrived only as a summary. Under the GDPR, people may request a free copy of any personal data a company holds about them, and the DPC found the tool fell short of that requirement. The findings concern how much data the tool supplied, not whether automated access tools can exist at all. Graham Doyle, deputy commissioner at the DPC, said automated access tools can be a useful and efficient route to personal data, but only under a condition.

“These tools do not need to provide a complete copy of personal data but they must be fair and transparent to individuals regarding the extent of the data provided.”

The investigation

The DPC opened its inquiry in January 2020 to test the tool against the GDPR. Tens of thousands of users used the Download My Data tool during the period the inquiry assessed. The regulator stressed that Tinder had marketed the feature as a route to a copy of the data, which the tool did not deliver in full. The decision was taken by the commissioners for data protection, Des Hogan, Dale Sunderland and Niamh Sweeney, and it combines the fine, the reprimand and the compliance order. The timeline below marks the opening of the inquiry and the date of the decision.

Response and next steps

A Match Group spokesperson confirmed the company received the decision and will appeal it. The spokesperson stressed the company's cooperation with the regulator during the investigation.

“Tinder engaged with the DPC throughout this investigation, and we stand behind the privacy protections we've built for our users.”

The company's position is that its privacy protections are sound. The three-month order requires Match Group to align its data processing with the GDPR within three months of the decision. The appeal leaves the €11 million fine contested, and the articles give no timetable for it.