Norway Fines Microsoft-Owned Xandr $9.6M Over Grindr Data Sharing

· Cybersecurity · Norway

Norway's Data Protection Authority (Datatilsynet) has fined Xandr, the advertising company owned by Microsoft, NOK 92 million (about $9.6 million) for unlawfully processing and sharing sensitive data belonging to Grindr users in Norway. The penalty centers on how the ad-tech firm handled personal information tied to users of the dating app, which can reveal sensitive details such as sexual orientation. The fine reflects European regulators' continued scrutiny of the advertising technology sector and the data broker ecosystem that underpins programmatic advertising. For companies operating in ad tech, the case reinforces that data protection authorities are willing to impose substantial penalties when sensitive categories of personal data are shared without a valid legal basis, and it adds pressure on firms to audit how data flows through their advertising platforms.

Why it matters：It signals that regulators will penalize ad-tech data flows involving sensitive personal data, raising compliance stakes for advertising platforms globally.

Key points

  • Norway's Datatilsynet issued a NOK 92 million ($9.6M) fine against Xandr.
  • The penalty concerns processing and sharing sensitive data of Grindr users in Norway.
  • Xandr is owned by Microsoft.

Sources (original reporting)

More stories from this day