Norwegian regulator fines Microsoft ad subsidiary Xandr over Grindr data

The Norwegian Data Protection Authority has issued an 8.5 million euro fine against online advertising company Xandr, NOYB News reported. The regulatory penalty stems from how the firm processed personal data gathered from users of the Grindr dating app. The action follows a complaint filed in 2020 by the privacy rights organization noyb in cooperation with the Norwegian Consumer Council. [1]

A investigation by the Norwegian Consumer Council revealed that smartphone applications regularly transmit user information to numerous advertising partners through online tracking identifiers, according to NOYB News. These data streams include detailed metrics regarding personal interests, daily habits, and individual behavior. Adtech companies collect these data points to build detailed profiles that enable targeted digital advertising. [1]

Xandr operates as the digital advertising and analytics subsidiary of Microsoft, running an online platform known as Community that facilitates buying and selling consumer-focused digital ads. The enforcement action against Xandr follows previous European regulatory actions over tracking practices, as FTMQ Security reported earlier when Italian authorities fined healthcare data firm IQVIA 7 million euros over anonymization flaws. [1][3][5]

Privacy advocates described the enforcement decision as a significant setback for the online adtech sector and its broader tracking architecture, NOYB News reported. The ruling reinforces stricter compliance standards for third-party platforms that collect app user telemetry and behavioral records across mobile devices. [1]