Norway fines Xandr €8.6 million over Grindr data sharing

Norway's Data Protection Authority has fined Microsoft-owned advertising unit Xandr €8.6 million ($9.62 million) for illegally relaying Grindr users' sensitive data to advertisers. The regulator said the data included information revealing sexual orientation and could reach potentially thousands of companies. The authority found Xandr jointly responsible with Grindr for obtaining consent. Through real-time advertising auctions, Xandr relayed personal data when users opened the app, rather than establishing a legal basis for its processing. The infringements occurred between July 2018 and April 2020, before Microsoft acquired Xandr. Microsoft said it was reviewing the decision and assessing its options. Xandr has three weeks to appeal.