Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway's €9.6M penalty against Microsoft's Xandr for illicit Grindr data sharing signals intensifying EU enforcement against adtech sensitive-data processing — enterprises using third-party ad SDKs should reassess legal bases.
Summary written by editorial AI · Source link below
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]
Editorial Analysis
The fine shows EU DPAs will pursue downstream data recipients, not just the app — any enterprise embedding third-party adtech faces shared liability for sensitive-data processing.
Conduct a data-flow audit of all third-party advertising and analytics integrations to verify GDPR-compliant legal bases, especially for special-category data.
A €9.6M GDPR fine against a Microsoft adtech subsidiary highlights growing regulatory risk for enterprises that embed third-party advertising data flows.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at BleepingComputer in a new tab.
More from the Regulatory Desk
- UK proposes 14-year prison terms for undersea cable sabotage3d
- EU cyber law won’t force fixes for fridge controllers hit in French attack6d
- U.K. Sanctions Cryptomus for RU Money Laundering14 Oct
- CYBERFORT: A Compliance-Chain Platform Operationalising the Cyber Resilience Act for SMEs8 Oct
- Japan Adopts Proactive Cyber Defense Strategy8 Oct