Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
BLUF
Microsoft subsidiary Xandr faces a $9.6M penalty from Norway for mishandling sensitive Grindr user information.
NEWS
Norway's Data Protection Authority imposed a NOK 92 million fine on Xandr for unlawfully processing and sharing sensitive data from Grindr users. The violation involves the transfer of personal information without proper legal basis or consent, marking a significant enforcement action against ad-tech data practices.
Why I Care
This case underscores the high financial and reputational risks associated with mishandling sensitive categories of personal data like sexual orientation. It signals stricter global enforcement on ad-tech supply chains and third-party data sharing, affecting privacy compliance for all organizations handling similar datasets.
Next Steps
Privacy officers should audit third-party data sharing agreements immediately to ensure compliance with GDPR-like regulations. Legal teams must review consent mechanisms for sensitive data processing by Q4 2026 to mitigate future enforcement risks.
Source: BleepingComputer ·