Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
Norway fines Microsoft's Xandr €8.6 million for relaying Grindr users' sexual-orientation data.
Norway's Data Protection Authority fined Xandr, an advertising business now owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users' personal data, including information revealing sexual orientation, to potentially thousands of advertisers between July 2018 and April 2020. The authority said Xandr was a joint controller in real-time bidding and could not rely on an assumption that Grindr had obtained valid consent. The penalty, the watchdog's largest, was calculated from Xandr's turnover before Microsoft's December 2021 acquisition, and Xandr has three weeks to appeal. Microsoft said it is reviewing the decision. The article also notes Grindr's separate £26 million UK settlement and a $177 million AT&T data-breach settlement.
- Norway's DPA fined Xandr a record €8.6 million, about $9.62 million.
- Grindr users' data, including sexual orientation, was relayed from 2018 to 2020.
- Xandr was deemed a joint controller in real-time bidding without its own consent basis.
- Xandr has three weeks to appeal; Microsoft is reviewing the decision.
- The fine used pre-acquisition turnover, before Microsoft bought Xandr in 2021.
- Products
- XandrGrindrMicrosoft Ads
- Organizations
- Norwegian Data Protection AuthoritynoybMicrosoftAT&T
- Countries
- NorwayUnited StatesUnited Kingdom
From the original article
3 min read at thehackernews.com
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8. 6 million ($9. 62 million) for illegally relaying Grindr users' sensitive data to advertisers.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.