--- title: "McPartland Review: Supply Chain Security for Dating Apps" url: https://www.datingindustryinsights.com/news/mcpartland-review-cybersecurity-online-dating description: "McPartland Review could force dating apps to disclose third-party data handlers. Platforms must audit suppliers or risk losing security-conscious users." lang: en-GB --- Trending Tinder's Group Hangouts: Innovation or Identity Crisis?: https://www.datingindustryinsights.com/news/tinder-group-hangouts-low-pressure-dating | Ditto's Viral Growth: FOMO-Driven Sign-Ups or Genuine Dating Success?: https://www.datingindustryinsights.com/news/ditto-passes-200000-sign-ups | SPARK's Pivot: A White Flag in the Dating App Wars: https://www.datingindustryinsights.com/news/spark-drops-dating-app-for-network | UK's Under-16 Social Media Ban: A Warning Shot for Dating Apps: https://www.datingindustryinsights.com/news/uk-plans-online-safety-crackdown | Singapore's FirstDate: Can Algorithmic Monogamy Solve a Fertility Crisis?: https://www.datingindustryinsights.com/news/singapore-launches-government-dating-platform-firstdate Share on X: https://x.com/intent/post?url=https%3A%2F%2Fwww.datingindustryinsights.com%2Fnews%2Fmcpartland-review-cybersecurity-online-dating&text=McPartland%20Review%3A%20Dating%20Apps%27%20Supply%20Chain%20Security%20Reckoning Share on LinkedIn: https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.datingindustryinsights.com%2Fnews%2Fmcpartland-review-cybersecurity-online-dating Share on Facebook: https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.datingindustryinsights.com%2Fnews%2Fmcpartland-review-cybersecurity-online-dating Image: A digital padlocked shield hovering over interconnected server networks to illustrate supply chain cyber security compliance. (https://images.pexels.com/photos/5380684/pexels-photo-5380684.jpeg?auto=compress&cs=tinysrgb&w=1200&h=220&fit=crop&fm=webp&q=50&dpr=1) A digital padlocked shield hovering over interconnected server networks to illustrate supply chain cyber security compliance. Regulatory Monitor (https://www.datingindustryinsights.com/news?category=regulatory-monitor) # McPartland Review: Dating Apps' Supply Chain Security Reckoning By DII Regulatory Monitor (https://www.datingindustryinsights.com/author/regulatory-monitor)· June 10, 2024· 6 min read ## Key Points - • Conservative MP Stephen McPartland published the McPartland Review proposing mandatory transparency requirements for tech platforms relying on third-party data suppliers. - • Match Group reported $3.18 billion in 2024 revenue whilst Bumble disclosed $935.7 million, with both facing margin pressure from compliance costs. - • The Ashley Madison data breach in 2015 exposed 58 million user records, illustrating the catastrophic consequences of compromised dating platform security. - • Proposed supply chain security rules would provide dating operators an estimated 18 to 24 months to conduct audits and upgrade vendors. A parliamentary review into digital security standards could force dating platforms to disclose which third-party suppliers handle their most sensitive user data—and whether those suppliers meet acceptable cyber security thresholds. The McPartland Review (https://www.gov.uk/government/publications/mcpartland-review-of-cyber-security-and-economic-growth), published last week by Conservative MP Stephen McPartland, proposes new transparency requirements for tech firms that would extend liability beyond their own systems to encompass the entire supply chain. The implications for dating operators are immediate, as most platforms now rely on external providers for critical functions including cloud infrastructure, payment processing, AI-powered matching algorithms, and content moderation tools. According to the Online Dating and Discovery Association (ODDA), which represents Match Group (MTCH), Bumble (https://www.datingindustryinsights.com/news/bumble-lawsuit-over-preventable-data-breach) (BMBL), and smaller operators, the sector is taking the proposals seriously. But taking something seriously and being prepared for mandatory disclosure are different matters entirely. Image: Digital security and data protection concept (https://images.pexels.com/photos/5380608/pexels-photo-5380608.jpeg) Digital security and data protection concept The DII Take > This could be the forcing function the industry needs. Dating platforms have spent years reassuring users about data protection whilst quietly outsourcing the actual infrastructure to whoever offers the best price. If McPartland's framework gains traction, operators will face a choice: audit and upgrade their supplier networks, or watch security-conscious users migrate to competitors who can prove their entire stack is watertight. The review isn't government policy yet, but the direction of travel is unmistakable. ### Create a free account Unlock unlimited access and get the weekly briefing delivered to your inbox. ## When the breach comes from outside Dating apps have historically treated cyber security as an internal matter. Build secure systems, encrypt data at rest and in transit, implement two-factor authentication, hire a chief information security officer, publish a transparency report. Job done. That approach collapses when a breach originates three suppliers deep in the chain. A payment processor gets compromised. An AI vendor fails to adequately sandbox training data. A cloud hosting provider misconfigures access permissions. The user doesn't care whose fault it was—they care that their location history, sexual preferences, or private messages are now circulating on dark web forums. Ashley Madison remains the industry's nightmare scenario—58 million records exposed in 2015, with catastrophic consequences for users whose infidelity-focused activity was suddenly public. But more recent incidents illustrate the supply chain dimension. Dating platforms increasingly depend on external AI providers for features like photo verification, message filtering, and compatibility scoring. If those providers don't maintain equivalent security standards, the platform inherits the risk without necessarily inheriting the visibility. McPartland's review, according to ODDA (https://www.datingindustryinsights.com/companies/odda), identifies seven areas where current cyber security frameworks fall short. The organisation hasn't detailed all seven, but the core principle is clear: companies should be accountable for the security practices of any third party that touches user data. Image: Technology infrastructure and cloud computing systems (https://images.pexels.com/photos/2036656/pexels-photo-2036656.jpeg) Technology infrastructure and cloud computing systems ## The compliance calculation Implementing supply chain security requirements would require dating platforms to conduct regular audits of every vendor with data access. That means contract renegotiations, potentially higher costs for certified providers, and difficult decisions about legacy relationships with suppliers who can't or won't meet elevated standards. For Match Group, which operates multiple brands across dozens of markets, the administrative burden alone would be substantial. The company disclosed $3.18B in revenue for 2024, but operating margins have been under pressure. Adding a compliance layer that extends beyond internal systems to encompass cloud providers, payment gateways, and AI vendors won't be cheap. Bumble, which reported revenue of $935.7M for 2024, has emphasised security features as part of its brand positioning—particularly around protecting women from harassment. That marketing advantage becomes a liability if transparency requirements reveal security gaps in third-party relationships. > Smaller operators face a different calculation. Niche platforms with limited resources often rely heavily on off-the-shelf solutions and external providers precisely because building in-house capabilities is prohibitively expensive. Mandatory supply chain audits could price them out of the market or force consolidation into larger groups that can absorb compliance costs. ## What adoption would mean The McPartland Review originates from an individual MP, not from formal government policy machinery. That distinction matters. Parliamentary reviews frequently highlight important issues without translating into legislation. The question is whether this one gains momentum within the Home Office and Cabinet Office, both of which oversee aspects of cyber security policy. ODDA's response suggests the industry expects something to happen. The trade body's engagement indicates operators view this as credible enough to warrant preparation, even if the timeline and final scope remain uncertain. If adopted in some form, the requirements would likely phase in over 18 to 24 months—enough time for platforms to audit suppliers and either upgrade relationships or find alternatives. The knock-on effect would be a bifurcated market. Platforms that can demonstrate comprehensive supply chain security would have a defensible claim to user trust. Image: Business compliance and regulatory framework (https://images.pexels.com/photos/5380665/pexels-photo-5380665.jpeg) Business compliance and regulatory framework Those that can't would face uncomfortable questions about why they're still using providers who can't meet basic standards. That bifurcation matters most in premium segments. Paid subscribers—the users who actually generate revenue—tend to be older, more privacy-conscious, and more willing to switch platforms over trust issues. A breach stemming from poor supplier security could accelerate churn in exactly the demographic operators most want to retain. The broader regulatory context reinforces the trend. The UK Online Safety Act (OSA) already imposes content moderation and child safety requirements. The EU Digital Services Act (DSA) mandates transparency around algorithmic systems. Supply chain security requirements would fit within an established pattern: regulators increasingly expect platforms to be accountable not just for their own systems, but for the entire ecosystem that delivers the service. Whether McPartland's specific proposals become law or simply influence the next iteration of cyber security guidance, the underlying pressure won't dissipate. Dating platforms hold extraordinarily sensitive data. Users are increasingly aware of that fact. Any framework that forces greater transparency about who actually handles that data, and how securely they do it, shifts the competitive landscape toward operators who've already invested in robust supply chain oversight (https://www.stephen-mcpartland.com/news/2248-mcpartland-review)—and away from those who've treated vendor security as someone else's problem. The review's focus on building trust and resilience across the UK economy (https://www.raidiam.com/insights/thought-leadership/mcpartland-review-cyber-security-economic-growth) extends naturally to platforms handling intimate personal information. ## Key Takeaways - • Mandatory supply chain audits in the United Kingdom could force market consolidation by pricing out smaller niche dating platforms unable to absorb compliance costs. - • Dating app compliance teams must prepare for vendor oversight as United Kingdom regulators align cyber security rules with the Online Safety Act. ## Frequently Asked Questions ### What is the McPartland Review? ### How much revenue did Match Group make in 2024? ### How many records were leaked in the Ashley Madison breach? Privacy & Data: https://www.datingindustryinsights.com/tag/privacy-data Content Moderation: https://www.datingindustryinsights.com/tag/content-moderation Regulation & Policy: https://www.datingindustryinsights.com/tag/regulation-policy D DII Regulatory Monitor (https://www.datingindustryinsights.com/author/regulatory-monitor) Policy & Regulation Desk The DII Regulatory Monitor tracks legislation, enforcement action, safety rules and compliance across dating industry markets. More articles by DII Regulatory Monitor (https://www.datingindustryinsights.com/author/regulatory-monitor) ## Comments Join the discussion Industry professionals share insights, challenge assumptions, and connect with peers. Sign in to add your voice. Your comment is reviewed before publishing. No spam, no self-promotion. ## More in Regulatory Monitor View all → (https://www.datingindustryinsights.com/news?category=regulatory-monitor) Regulatory Monitor ### ODDA's Veriff Partnership: A Preemptive Strike on Compliance ODDA has granted associate partner status to Veriff, an Estonian identity verification provider processing over 12,500 d… Monday 13th July · 1 min read Read → https://www.datingindustryinsights.com/news/veriff-joins-online-dating-association Regulatory Monitor ### Match and Bumble Breaches: Contractor Access Is the Real Threat Over 10 million records exposed across Match Group's portfolio including Hinge, OkCupid, and Match.com following ShinyHu… Monday 2nd February · 1 min read Read → https://www.datingindustryinsights.com/news/dating-app-giants-shinyhunters-breaches Financial & Investor ### Grindr's $3B Private Bid: A Forced Sale, Not Strategic Optionality Grindr is in talks for a $3 billion private buyout following lender Fullerton Financial Holdings seizing shares after de… Tuesday 14th October · 1 min read Read → https://www.datingindustryinsights.com/news/grindr-explores-going-private-shares Regulatory Monitor ### Northern Rail's Dating App Ban: A Wake-Up Call for Verification Standards Northern Rail maintains a decade-old ban on dating apps across its WiFi network under the government-backed Friendly WiF… Wednesday 18th September · 1 min read Read → https://www.datingindustryinsights.com/news/train-operator-northern-blocks-dating-apps Up next: ODDA's Veriff Partnership: A Preemptive Strike on Compliance (https://www.datingindustryinsights.com/news/veriff-joins-online-dating-association) ## Structured data ```json [ { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.datingindustryinsights.com/" }, { "@type": "ListItem", "position": 2, "name": "News", "item": "https://www.datingindustryinsights.com/news" }, { "@type": "ListItem", "position": 3, "name": "Regulatory Monitor", "item": "https://www.datingindustryinsights.com/news" }, { "@type": "ListItem", "position": 4, "name": "McPartland Review: Dating Apps' Supply Chain Security Reckoning" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is the McPartland Review?", "acceptedAnswer": { "@type": "Answer", "text": "The McPartland Review is a review by Conservative MP Stephen McPartland proposing mandatory transparency rules for third-party suppliers handling sensitive user data." } }, { "@type": "Question", "name": "How much revenue did Match Group make in 2024?", "acceptedAnswer": { "@type": "Answer", "text": "Match Group disclosed $3.18 billion in revenue for 2024, whilst Bumble reported $935.7 million during the same financial year." } }, { "@type": "Question", "name": "How many records were leaked in the Ashley Madison breach?", "acceptedAnswer": { "@type": "Answer", "text": "The 2015 Ashley Madison cyber security breach exposed 58 million user records." } } ] }, { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "McPartland Review: Dating Apps' Supply Chain Security Reckoning", "description": "McPartland Review could force dating apps to disclose third-party data handlers. Platforms must audit suppliers or risk losing security-conscious users.", "abstract": "McPartland Review could force dating apps to disclose third-party data handlers. Platforms must audit suppliers or risk losing security-conscious users.", "image": [ "https://images.pexels.com/photos/5380684/pexels-photo-5380684.jpeg" ], "datePublished": "2024-06-10T00:00:00+00:00", "dateModified": "2024-06-10T00:00:00+00:00", "inLanguage": "en-GB", "isAccessibleForFree": true, "wordCount": 1124, "articleSection": "Regulatory Monitor", "keywords": [ "Privacy & Data", "Content Moderation", "Regulation & Policy" ], "author": { "@type": "Person", "name": "DII Regulatory Monitor", "url": "https://www.datingindustryinsights.com/author/regulatory-monitor", "jobTitle": "Policy & Regulation Desk", "description": "The DII Regulatory Monitor tracks legislation, enforcement action, safety rules and compliance across dating industry markets.", "knowsAbout": [ "Online dating industry", "Dating app business models", "Match Group", "Dating industry regulation" ], "sameAs": [], "worksFor": { "@type": "Organization", "name": "Dating Industry Insights", "url": "https://www.datingindustryinsights.com/" } }, "publisher": { "@type": "Organization", "name": "Dating Industry Insights", "url": "https://www.datingindustryinsights.com/", "logo": { "@type": "ImageObject", "url": "https://www.datingindustryinsights.com/images/am-rebrand-logo.jpg" }, "parentOrganization": { "@type": "Organization", "name": "High Intent Media Inc", "url": "https://www.highintentmediagroup.com" } }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.datingindustryinsights.com/news/mcpartland-review-cybersecurity-online-dating" }, "isPartOf": { "@type": "WebSite", "name": "Dating Industry Insights", "url": "https://www.datingindustryinsights.com/" }, "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "article h1", "article .article-body > p:first-of-type" ] }, "alternativeHeadline": "Conservative MP Stephen McPartland published the McPartland Review proposing mandatory transparency requirements for tech platforms relying on third-party data suppliers.", "mainEntity": { "@type": "ItemList", "name": "Key points", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Conservative MP Stephen McPartland published the McPartland Review proposing mandatory transparency requirements for tech platforms relying on third-party data suppliers." }, { "@type": "ListItem", "position": 2, "name": "Match Group reported $3.18 billion in 2024 revenue whilst Bumble disclosed $935.7 million, with both facing margin pressure from compliance costs." }, { "@type": "ListItem", "position": 3, "name": "The Ashley Madison data breach in 2015 exposed 58 million user records, illustrating the catastrophic consequences of compromised dating platform security." }, { "@type": "ListItem", "position": 4, "name": "Proposed supply chain security rules would provide dating operators an estimated 18 to 24 months to conduct audits and upgrade vendors." } ] }, "backstory": "Mandatory supply chain audits in the United Kingdom could force market consolidation by pricing out smaller niche dating platforms unable to absorb compliance costs. Dating app compliance teams must prepare for vendor oversight as United Kingdom regulators align cyber security rules with the Online Safety Act.", "about": { "@type": "Organization", "name": "Match Group", "url": "https://mtch.com" }, "mentions": [ { "@type": "Organization", "name": "Match Group", "url": "https://mtch.com" }, { "@type": "Organization", "name": "ODDA", "url": "https://theodda.org" }, { "@type": "Organization", "name": "Bumble", "url": "https://bumble.com" } ], "citation": [ { "@type": "WebPage", "name": "McPartland Review", "url": "https://www.gov.uk/government/publications/mcpartland-review-of-cyber-security-and-economic-growth", "publisher": { "@type": "Organization", "name": "gov.uk" } }, { "@type": "WebPage", "name": "robust supply chain oversight", "url": "https://www.stephen-mcpartland.com/news/2248-mcpartland-review", "publisher": { "@type": "Organization", "name": "stephen-mcpartland.com" } }, { "@type": "WebPage", "name": "building trust and resilience across the UK economy", "url": "https://www.raidiam.com/insights/thought-leadership/mcpartland-review-cyber-security-economic-growth", "publisher": { "@type": "Organization", "name": "raidiam.com" } } ], "hasPart": [ { "@type": "WebPageElement", "name": "When the breach comes from outside", "url": "https://www.datingindustryinsights.com/news/mcpartland-review-cybersecurity-online-dating#section-1-when-the-breach-comes-from-outside" }, { "@type": "WebPageElement", "name": "The compliance calculation", "url": "https://www.datingindustryinsights.com/news/mcpartland-review-cybersecurity-online-dating#section-2-the-compliance-calculation" }, { "@type": "WebPageElement", "name": "What adoption would mean", "url": "https://www.datingindustryinsights.com/news/mcpartland-review-cybersecurity-online-dating#section-3-what-adoption-would-mean" } ] }, [ { "@context": "https://schema.org", "@type": "NewsArticle", "headline": "McPartland Review: Dating Apps' Supply Chain Security Reckoning", "description": "McPartland Review could force dating apps to disclose third-party data handlers. Platforms must audit suppliers or risk losing security-conscious users.", "abstract": "McPartland Review could force dating apps to disclose third-party data handlers. Platforms must audit suppliers or risk losing security-conscious users.", "image": [ "https://images.pexels.com/photos/5380684/pexels-photo-5380684.jpeg?auto=compress&cs=tinysrgb&w=1200&h=630&fit=crop&fm=jpg&q=75&dpr=1" ], "datePublished": "2024-06-10T00:00:00+00:00", "dateModified": "2024-06-10T00:00:00+00:00", "inLanguage": "en-GB", "isAccessibleForFree": true, "wordCount": 1128, "articleSection": "Regulatory Monitor", "keywords": [ "Privacy & Data", "Content Moderation", "Regulation & Policy" ], "author": { "@type": "Person", "name": "DII Regulatory Monitor", "url": "https://www.datingindustryinsights.com/author/regulatory-monitor", "jobTitle": "Policy & Regulation Desk", "description": "The DII Regulatory Monitor tracks legislation, enforcement action, safety rules and compliance across dating industry markets.", "knowsAbout": [ "Online dating industry", "Dating app business models", "Match Group", "Dating industry regulation" ], "sameAs": [], "worksFor": { "@type": "Organization", "name": "Dating Industry Insights", "url": "https://www.datingindustryinsights.com/" } }, "publisher": { "@type": "Organization", "name": "Dating Industry Insights", "url": "https://www.datingindustryinsights.com/", "logo": { "@type": "ImageObject", "url": "https://www.datingindustryinsights.com/images/am-rebrand-logo.jpg" }, "parentOrganization": { "@type": "Organization", "name": "High Intent Media Inc", "url": "https://www.highintentmediagroup.com" } }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.datingindustryinsights.com/news/mcpartland-review-cybersecurity-online-dating" }, "isPartOf": { "@type": "WebSite", "name": "Dating Industry Insights", "url": "https://www.datingindustryinsights.com/" }, "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "article h1", "article .article-body > p:first-of-type" ] }, "alternativeHeadline": "Conservative MP Stephen McPartland published the McPartland Review proposing mandatory transparency requirements for tech platforms relying on third-party data suppliers.", "mainEntity": { "@type": "ItemList", "name": "Key points", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Conservative MP Stephen McPartland published the McPartland Review proposing mandatory transparency requirements for tech platforms relying on third-party data suppliers." }, { "@type": "ListItem", "position": 2, "name": "Match Group reported $3.18 billion in 2024 revenue whilst Bumble disclosed $935.7 million, with both facing margin pressure from compliance costs." }, { "@type": "ListItem", "position": 3, "name": "The Ashley Madison data breach in 2015 exposed 58 million user records, illustrating the catastrophic consequences of compromised dating platform security." }, { "@type": "ListItem", "position": 4, "name": "Proposed supply chain security rules would provide dating operators an estimated 18 to 24 months to conduct audits and upgrade vendors." } ] }, "backstory": "Mandatory supply chain audits in the United Kingdom could force market consolidation by pricing out smaller niche dating platforms unable to absorb compliance costs. Dating app compliance teams must prepare for vendor oversight as United Kingdom regulators align cyber security rules with the Online Safety Act.", "about": { "@type": "Organization", "name": "Match Group", "url": "https://mtch.com" }, "mentions": [ { "@type": "Organization", "name": "Match Group", "url": "https://mtch.com" }, { "@type": "Organization", "name": "ODDA", "url": "https://theodda.org" }, { "@type": "Organization", "name": "Bumble", "url": "https://bumble.com" } ], "citation": [ { "@type": "WebPage", "name": "McPartland Review", "url": "https://www.gov.uk/government/publications/mcpartland-review-of-cyber-security-and-economic-growth", "publisher": { "@type": "Organization", "name": "gov.uk" } }, { "@type": "WebPage", "name": "robust supply chain oversight", "url": "https://www.stephen-mcpartland.com/news/2248-mcpartland-review", "publisher": { "@type": "Organization", "name": "stephen-mcpartland.com" } }, { "@type": "WebPage", "name": "building trust and resilience across the UK economy", "url": "https://www.raidiam.com/insights/thought-leadership/mcpartland-review-cyber-security-economic-growth", "publisher": { "@type": "Organization", "name": "raidiam.com" } } ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://www.datingindustryinsights.com/" }, { "@type": "ListItem", "position": 2, "name": "News", "item": "https://www.datingindustryinsights.com/news" }, { "@type": "ListItem", "position": 3, "name": "Regulatory Monitor", "item": "https://www.datingindustryinsights.com/news" }, { "@type": "ListItem", "position": 4, "name": "McPartland Review: Dating Apps' Supply Chain Security Reckoning" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is the McPartland Review?", "acceptedAnswer": { "@type": "Answer", "text": "The McPartland Review is a review by Conservative MP Stephen McPartland proposing mandatory transparency rules for third-party suppliers handling sensitive user data." } }, { "@type": "Question", "name": "How much revenue did Match Group make in 2024?", "acceptedAnswer": { "@type": "Answer", "text": "Match Group disclosed $3.18 billion in revenue for 2024, whilst Bumble reported $935.7 million during the same financial year." } }, { "@type": "Question", "name": "How many records were leaked in the Ashley Madison breach?", "acceptedAnswer": { "@type": "Answer", "text": "The 2015 Ashley Madison cyber security breach exposed 58 million user records." } } ] } ] ] ```