Norway fines Microsoft's Xandr $9.6 million over Grindr data use
Norway's data protection authority says Xandr used sensitive Grindr user data for advertising without explicit consent, and calls the penalty its largest to date.
Norway's data protection authority has fined Xandr, the adtech subsidiary of Microsoft, 92 million Norwegian kroner (about $9.6 million), according to Engadget. The Norwegian Data Protection Authority said Xandr failed to obtain explicit consent to use sensitive Grindr user data for advertising.
The NDPA said the penalty is the highest it has issued to date, and that the amount was calculated from Xandr's total annual turnover. The agency said the data infringements took place between July 2018 and April 2020.
Xandr has three weeks to appeal the penalty.
Earlier complaints and penalties
In 2020, Norway's consumer council filed a complaint with the NDPA against Xandr, which Microsoft did not own at the time. The same Norwegian agency previously fined Grindr more than 5.6 million euros (about $6.2 million) for similar data-sharing reasons, and in 2024 Grindr was hit with a lawsuit in London for allegedly sharing data including users' HIV status and test dates.
Quick answers
How much was Xandr fined in Norway?
The Norwegian Data Protection Authority fined Xandr 92 million Norwegian kroner, about $9.6 million.
Why was Xandr fined?
The NDPA said Xandr failed to obtain explicit consent to use sensitive Grindr user data for advertising.
Can Xandr appeal the fine?
Yes. Xandr has three weeks to appeal the penalty.