CLARIFAI DELETES 3M OKCUPID PHOTOS USED FOR AI TRAINING
AI DESK■ 1 MIN READ
TUE, APR 21, 2026■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
AI company Clarifai has deleted 3 million profile photos it obtained from dating site OkCupid in 2014 for facial recognition training. The deletion follows an FTC settlement with Match Group, OkCupid's parent company, over privacy policy violations.
Clarifai certified the data deletion to the FTC in April, more than a decade after the photos were initially scraped from the dating platform without user consent. Match Group violated its own privacy policies by allowing the photo collection, which was used to train Clarifai's facial recognition algorithms.
The settlement between the FTC and Match Group remains undisclosed in terms of financial penalties. The case highlights ongoing tensions between AI companies seeking training data and user privacy protections.
OkCupid users were not notified that their images had been collected or used for AI development. The incident underscores broader concerns about how personal data from social platforms and dating sites may be repurposed for machine learning without explicit consent.
Clarifai's deletion represents a rare instance of an AI company being forced to remove improperly obtained training data, though critics note the lengthy delay between initial collection and removal.
■ SOURCES
► Engadget■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE
■ MORE FROM THE SECURITY DESK
Cybercriminals have transformed DDoS attacks into a polished, commercialized service complete with pricing tiers, customer support, and reseller programs. The DDoS-as-a-Service market has evolved from basic tools into sophisticated attack platforms.
YESTERDAY— Industry Desk
Microsoft faced backlash after threatening a security researcher with criminal investigation, reigniting debate over software vulnerability disclosure practices and corporate responsibility.
YESTERDAY— Security Desk
Google is deploying Device Bound Session Credentials (DBSC) to all Chrome users, a security feature designed to prevent account takeovers by protecting session cookies from theft.
YESTERDAY— Industry Desk
Dutch authorities have dismantled a major botnet comprising 17 million infected devices and seized over 200 servers hosting the operation at a local provider.
YESTERDAY— Security Desk