Safety law
The rules dating apps now live under. Tracked for you.
Safety used to be a PR risk. Now it’s a legal one, with fines that can reach 10% of global revenue in the UK. We keep up with the law so your team doesn’t have to.
UK Online Safety Act
Ofcom · fines up to £18m or 10% of global revenuePartly in place What’s unusualAge checks must be “highly effective”. Asking for a date of birth is no longer enough, and Ofcom has said it will act on weak checks.
What we doFrom 30 November 2026, facial age estimation at sign-up, with an ID document check when the estimate is close to 18 or something looks wrong. No face or ID checks run before then. Reporting and complaints routes, and support with your risk assessment.
Lewis Silkin on Ofcom and age checks, July 2026
EU Digital Services Act
European Commission and national regulatorsPartly in place What’s unusualEvery moderation decision that affects a member needs a written “statement of reasons” they can appeal. Online platforms also send those statements to a public EU database.
What we doRemovals and restrictions carry a reason the member can read, with a way to appeal (for every partner by January 2027). Statements to the EU database and transparency reports produced from the same records, by January 2027.
European Commission: DSA Transparency Database
US state dating laws
New Jersey and others · state attorneys generalIn progress What’s unusualSome states say exactly what an app must tell members about criminal background checks, down to the type size. In September 2026 Match Group agreed to pay New Jersey $650,000 over these disclosures.
What we doSafety notices set by state and shown in your app’s own words, plus biometric consent and age laws tracked by market as they come into force.
Regulatory Oversight, September 2026
UK GDPR and EU GDPR
Data protection authoritiesIn progress What’s unusualUsing a dating app can reveal someone’s sexual orientation, which is “special category” data. Norway fined Grindr NOK 65m over sharing data, and the courts upheld the fine.
What we doEach partner has its own separate database. We act as your processor under a data processing agreement, and deleted accounts are removed within 30 days. Member data is never used to train AI models.
Norwegian Consumer Council: Grindr loses appeal
US privacy laws
California’s CCPA and CPRA, and other statesIn progress What’s unusualPrecise location and sexual orientation count as “sensitive” information that people can limit. Dating apps run on both.
What we doOther members only ever see an approximate location, never exact coordinates. Access and deletion requests are handled through the same tools as GDPR.
The API returns an approximate location for other members.
Australian Online Dating Industry Code
Industry code, enforced from April 2025In progress What’s unusualApps must detect and act on harm that starts online, and publish reports on the Australian accounts they close and how they moderate.
What we doReporting on every profile and conversation, scam and harm detection supervised by our trust and safety team, and the closure and moderation records you need for your reports.
Australian Government: new industry code to make online dating safer
Certifications and standards
What auditors and enterprise buyers ask for- ISO 27001Preparing for certification, run through a compliance platform. Target: June 2027.In progress
- NIS2 supply chainThe Article 21 security measures EU operators expect of their suppliers.In progress
- PCI DSSCard data is handled by certified payment providers. We never see or store full card numbers.Not stored by us