Norway fines Microsoft adtech arm over Grindr user data handling
Datatilsynet says the penalty is its largest so far and gives Xandr three weeks to appeal.
Norway’s data protection regulator has fined Xandr, Microsoft’s adtech arm, NOK 92 million, or about $9.6 million, over the handling of Grindr user data in real-time ad auctions. The agency said Xandr relied on Grindr’s supposed consent instead of securing its own explicit approval, and that the sensitive data of users in Norway and elsewhere was exposed to advertisers between July 2018 and April 2020. The penalty is the largest Datatilsynet has issued, and Xandr has three weeks to appeal. Microsoft said the case concerns conduct before its acquisition of Xandr and is reviewing its options.
Why it matters
The case puts a price on how adtech firms handle sensitive data tied to dating app users, and on whether one company can rely on another's consent in ad auctions. It also leaves Microsoft’s adtech arm with a short appeal window while it says the conduct predates its acquisition of Xandr.
Keep or strike?
Does this story matter, or is it hype? Mark it before you see what everyone else did.
Sources
- Engadget
- BleepingComputer