Microsoft’s Xandr fined in Norway over Grindr data sharing

By Júlia Tar ( October 12, 2026, 09:59 GMT | Insight) -- Microsoft-owned advertising technology company Xandr has received the Norwegian Data Protection Authority’s largest-ever fine for breaching the EU’s General Data Protection Regulation by unlawfully processing and sharing Grindr users’ personal data, including information revealing sexual orientation. The authority said Xandr had failed to ensure it had valid consent. Microsoft said the conduct predated its acquisition of Xandr and that it was reviewing the decision.Microsoft-owned advertising technology company Xandr has been fined 92 million Norwegian kroner (€8.6 million) for unlawfully processing and sharing Grindr users’ personal data through automated advertising auctions in breach of the EU’s General Data Protection Regulation, Norway’s data protection authority said in a Monday statement....

Prepare for tomorrow’s regulatory change, today

MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.


Know what others in the room don’t, with features including:

  • Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
  • Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
  • Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
  • Curated case files bringing together news, analysis and source documents in a single timeline

Experience MLex today with a 14-day free trial.

Start Free Trial

Already a subscriber? Click here to login