The Norwegian Data Protection Authority imposed a fine of 65 Mio NOK on Grindr for sharing sensitive personal data without valid consent. The authority found the consent mechanism invalid and highlighted the lack of a genuine opt‑out. The fine was adjusted from an initial draft of 100 Mio NOK based on Grindr's revenue and remedial actions.
Why it matters: The enforcement underscores that personal data, especially sensitive categories, cannot be used as a payment mechanism without proper consent under GDPR.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
