The Norwegian Data Protection Authority decided that Xandr, now part of Microsoft, processed personal data, including sensitive sexual orientation information, without a valid legal basis and imposed a fine of roughly €8.5 million. The enforcement follows a 2020 complaint filed by noyb and the Norwegian Consumer Council regarding data transferred from the dating app Grindr.
Why it matters: The fine signals heightened enforcement risk for ad‑tech firms that track and profile users without proper consent.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
