Company: MTCH
Filing Date: 2025-02-27
Form Type: 10-K
Source: 0000891103-25-000027
Chunk: 73

Company: Match Group, Inc.
Filing Date: 2025-02-27
Form: 10-K
Item: Item 1
Chunk 73
---
.S. state legislatures are also considering privacy legislation in 2025 and beyond. Some U.S. state legislatures have already passed and enacted privacy legislation, most prominently the California Consumer Privacy Act of 2018, which came into effect in 2020. Also, the California Privacy Rights Act of 2020 (the “CPRA”) was enacted, which expanded the state’s consumer privacy laws and created a new government organization, the California Privacy Protection Agency, to enforce the law. The majority of the CPRA’s provisions entered into force on January 1, 2023, with a lookback to January 2022. In addition to California, comprehensive privacy laws were passed in Virginia, Colorado, Connecticut, and Utah, each of which came into force in 2023, as well as Florida, Montana, Oregon, and Texas, each of which came into force in 2024. Additionally, the Federal Trade Commission has increased its focus on privacy and data security practices at digital companies, as evidenced by its levying of several large fines against digital companies for privacy violations in recent years. Finally, talks of a U.S. federal privacy law are ongoing in Congress, with multiple proposals being considered, and may lead to the passing of a new law in the coming years.

Concerns about harms and the use of dating services and social networking platforms for illegal conduct, such as romance scams, promotion of false or inaccurate information, financial fraud, and sex-trafficking, have produced and could continue to produce future legislation or other governmental action. For example, the EU’s Digital Services Act (the “DSA”), which went into effect in 2024, imposes additional requirements on technology companies around moderation, transparency, and the overall safety of their platforms. In addition, the UK’s Online Safety Bill imposes similar requirements to those provided in the DSA. Of note, this law places new requirements on social media companies, including online dating companies, to protect children from being exposed to inappropriate material. Most of the provisions of this law are scheduled to go into effect in 2025.

In the United States, government authorities, elected officials, and political candidates have called for amendments to Section 230 of the Communications Decency Act (the “CDA”) that aim to limit or remove protections afforded to technology companies. Additionally, there are multiple ongoing legal challenges to the CDA in U.S. federal courts, which could further alter its scope and applicability. If these legislative or judicial efforts succeed in weakening the protections afforded by the CDA