Record GDPR Fine To Grindr In Digital Marketing Case

The Norwegian Privacy Appeals Board has upheld the Norwegian Data Protection Authority's record fine of NOK 65 million (Euro 6.2 million) for the failure to obtain valid consent to share personal data to AdTech companies for marketing purposes. This is the highest GDPR violation fine imposed thus far in Norway. The decision is the result of a complaint from the Norwegian Consumer Council, which has been assisted by Hjort's GDPR team.

The Privacy Appeals Board found that Grindr shared information about Grindr users with advertising companies for marketing purposes without obtaining valid consent from those users. Users were neither sufficiently informed nor had they given voluntary consent to this sharing of information, partly because information about the disclosure of the users' information to Grindr's advertising partners, was only included in Grindr's privacy policy. As use of the Grindr app gives indirect information about a person's sexual preferences, the