Norway fines Microsoft subsidiary Xandr $9.6 million over Grindr data privacy violations

Norway's data protection authority, Datatilsynet, has issued a fine of approximately $9.6 million to Xandr, a Microsoft subsidiary, for alleged violations of user data privacy. The penalty stems from the company's handling of personal information belonging to users of the dating app Grindr. Regulators claim that Xandr failed to obtain valid consent before sharing user data with third parties for targeted advertising purposes, which is a breach of the European Union's General Data Protection Regulation (GDPR). This significant fine highlights the ongoing scrutiny of ad-tech companies regarding how they track and monetize user behavior. Xandr, which Microsoft acquired in 2021, has been granted a three-week window to formally appeal the decision. The case underscores the strict enforcement of privacy laws in Norway and the broader European market, serving as a warning to tech firms operating within the region.