Norway penalises Microsoft's Xandr over Grindr user data sharing

Norway's consumer protection authorities have fined Microsoft's advertising subsidiary Xandr approximately US$9.6 million for improperly sharing personal information from the Grindr dating application without adequate user consent.

The enforcement action stems from a 2020 complaint filed by the Norwegian Consumer Council, which conducted an investigation into data-sharing practices across numerous mobile applications. The inquiry exposed how user information was being transmitted to third parties, including advertising networks and data brokers, often without transparent disclosure or explicit user authorisation.

The case highlights growing regulatory scrutiny of data privacy practices in the digital advertising sector across Europe and beyond. Nordic countries have emerged as particularly vigilant in enforcing consumer protection standards, with regulators taking action against companies that fail to secure proper consent before sharing sensitive personal information.

The fine against Xandr underscores the heightened penalties technology companies now face for data mishandling, particularly involving intimate user information. Microsoft and other tech firms operating in European markets continue to face investigations and enforcement actions related to compliance with stringent data protection regulations.

The case reinforces expectations that companies collecting personal data must implement robust consent mechanisms and maintain transparency regarding how user information is processed and shared with external parties.