Microsoft's Xandr fined NOK 92M in Norway over Grindr user data
kr 92M
≈ $9.6M at the time
Datatilsynet
Norway · 2026
Status: Not yet final
What happened
Norway's Datatilsynet found that Xandr, the advertising technology company formerly called AppNexus and now owned by Microsoft, was a joint controller with Grindr when it relayed Norwegian Grindr users' data through real-time bidding between July 2018 and April 2020. The data revealed users' sexual orientation, which required explicit consent, and Xandr did not check that Grindr's consents were valid.
It is the largest fine Datatilsynet has issued. Xandr was not part of Microsoft during the infringement period, so the fine was calculated on Xandr's own turnover. Grindr itself was fined NOK 65M in 2021 for related breaches, which the Borgarting Court of Appeal upheld.
How it affected users
Data showing that a person used Grindr, which reveals their sexual orientation, could be passed to potentially thousands of companies in ad auctions. Datatilsynet said the length of the period and Xandr's direct financial benefit made the breaches more serious.
Status timeline
Oct 12, 2026
Fine announced; Xandr has three weeks from receiving the decision to appeal.
Sources
- Datatilsynet: Microsoft company fined NOK 92 million for unlawfully sharing personal dataregulator
- BleepingComputer: Norway fines Microsoft ad firm $9.6 million over Grindr data sharingnews
Last verified 2026-10-15. Spotted an error? Report a correction.
Cite this entry
Deepak Gupta, "Microsoft's Xandr fined NOK 92M in Norway over Grindr user data," Tech Fines Directory, guptadeepak.com, 2026-10-12. https://guptadeepak.com/tech-fines/violation/microsoft-norway-xandr-2026/