GoKawiilNorway fines Microsoft's Xandr $9.6M over Grindr ad-data sharing
Norway's Datatilsynet fined Xandr, a Microsoft-owned ad company, NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data of Grindr users between July 2018 and April 2020. The regulator found Xandr ran real-time ad auctions that exposed users' sexual orientation data to thousands of advertisers without verifying that Grindr had obtained valid consent. The case stemmed from a 2020 complaint filed by Austrian privacy group Noyb and the Norwegian Consumer Council.
GoKawiil's interpretation of the reporting above, not reported fact.
The fine, described by Datatilsynet as its largest ever, signals that European regulators may hold not just apps but their advertising intermediaries directly accountable for verifying consent under GDPR's joint-controller rules. This could push ad-tech firms across the industry to audit consent chains more rigorously rather than assuming partners have secured proper permissions. Privacy advocates like Noyb may see the decision as reinforcing their broader campaign against real-time bidding practices in digital advertising.
- Norway's Datatilsynet fined Microsoft-owned Xandr $9.6M, its largest-ever penalty.
- Xandr failed to verify Grindr had valid user consent before sharing sensitive data via ad auctions.
- The case originated from a 2020 complaint by Noyb and the Norwegian Consumer Council.
Source: bleepingcomputer.com, 2026-10-12
Published there as: “Norway fines Microsoft ad firm $9.6 million over Grindr data sharing”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.