Criminal History Investigation Disclosure

What it is

In certain circumstances, Bumble may investigate whether a user has a criminal history, particularly in response to reports of misconduct from other users or the press.

Why it matters (compliance & governance perspective)

This disclosure indicates that Bumble may conduct background or criminal history checks on users in response to reported misconduct, which has implications for how personal data and third-party background information is processed and retained.

Consumer impact (what this means for users)

Users should be aware that Bumble reserves the right to investigate their criminal history under certain circumstances, which involves processing sensitive personal information and may interact with background check regulations and privacy law obligations.

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages the Fair Credit Reporting Act (FCRA) if third-party consumer reporting agencies are used to conduct criminal background checks, which imposes specific disclosure, consent, and adverse action obligations. State background check laws, including those in California, Illinois, and New York, impose additional restrictions on the use of criminal history in consumer service contexts. The FTC has enforcement authority over FCRA compliance. GDPR Article 10 specifically restricts processing of criminal conviction and offense data for EU users, requiring explicit legal basis and in many cases supervisory authority authorization. GOVERNANCE EXPOSURE: High. The provision as presented in the truncated document is incomplete, making it impossible to fully assess the scope of the asserted investigation right, the data sources used, retention periods, or user notification obligations. The use of criminal history data in a consumer dating app context involves sensitive personal data categories under multiple regulatory frameworks, and the 'press reports' trigger for investigation is operationally unusual and may create due process concerns. JURISDICTION FLAGS: EU and EEA users face the highest exposure under GDPR Article 10 restrictions on criminal conviction data processing. California users are protected by the California Consumer Privacy Act's sensitive personal information framework and state criminal history use restrictions. Illinois and New York impose specific restrictions on criminal history use in consumer service contexts. UK users are protected under UK GDPR equivalent provisions. CONTRACT AND VENDOR IMPLICATIONS: If Bumble uses third-party background check vendors, those vendors must comply with FCRA as consumer reporting agencies, and Bumble must fulfill FCRA permissible purpose and disclosure requirements. Data processing agreements with background check vendors should be reviewed to confirm compliance with applicable data protection law. COMPLIANCE CONSIDERATIONS: Legal teams should obtain the complete text of this provision to assess the full scope of the investigation right. A FCRA compliance audit should confirm whether the investigation process constitutes a 'consumer report' under FCRA, and if so, whether required disclosures and consent mechanisms are in place. GDPR legal basis for processing criminal history data for EU users should be documented and assessed for adequacy.

Applicable agencies

Provision details

Other risks in this policy

• Perpetual Worldwide Content License high
• Mandatory Arbitration and Class Action Waiver high
• Account Termination Without Notice or Refund high
• Auto-Renewal Subscription medium
• User Indemnification for Content medium
• Recommender System and Matching Algorithms medium