Forbrukerrådet

www.forbrukerradet.no • October 13, 2026

The complaints and letters are a part of the project «Out of control» and are directed to the Norwegian Data Protection Agency for breaches of the General Data Protection Regulation (GDPR).

14.01.20: Coalition of Nine Consumer Organizations Send Letters to AdTech Report to Regulators and Congress

14.01.20: 10 BEUC member organisation notifiying their national supervisory authorities

14.01.20: Leading Consumer and Privacy Groups urge Congress, the FTC, State AGs in California, Texas, Oregon to Investigate several popular dating apps

04.03.20: Rights Organizations Warn Unlawful Data Exploitation in Popular Apps

21.04.20 Letter to the Global Privacy Assembly

27.02.20 Letter to the Match Group concerning use of third party tracking in dating apps

14.05.20 Letters sent to 8 companies

15.05.20 Response from fluxLoop

26.05.20 Response from fluxLoop (in Norwegian)

20.05.20 Response from the NCC to fluxLoop

06.06.20 Response from Foursquare

23.06.20 Response from Unacast

Safegraph and Fysical declined to have their responses published.

Partners in the «Out of control» action

BEUC-L-2020-107 Letter to Ms Denham – Chair Global Privacy Assembly

International umbrella organisations

Consumers International

European consumer organisations

Verbraucherzentrale Bundesverband (VZBV)

American Civil Liberties Union (ACLU)

Campaign for a Commercial Free Childhood (CCFC)

Center for Digital Democracy

Consumer Federation of America (CFA)

Electronic Privacy Information Center (EPIC)

Public Information Research Group (PIRG)

Electronic Frontier Foundation (EFF)

Human rights organisations

CMS, Center for Peace Studies

Digitale Gesellschaft

Netzwerk Datenschutzexpertise

Deutsche Vereinigung für Datenschutz

Társaság a szabadságjogokért

Coalizione Italiana Libertà e Diritti civili

Rights International, Spain

Civil rights defenders Sweden

The Court of Appeal has issued its decision: Grindr has violated the General Data Protection Regulation, and the fine of 65 million NOK (ca €5.5 million) is upheld. Se press release 25.10.25 «Grindr loses appeal»

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft's Xandr Fined €8.6M for Grindr Data Breach The Norwegian Data Protection Authority has fined Microsoft-owned Xandr NOK 92 million (approximately €8.6 million) for unlawfully processing and sharing Grindr users' sensitive personal data, including sexual orientation. This fine is the largest ever issued by the authority and stems from violations that occurred between July 2018 and April 2020. The investigation was initiated following a complaint from the Norwegian Consumer Council in 2020, which highlighted concerns over data handling by Grindr and advertising tech firms. Xandr, previously known as AppNexus, was found to have relayed personal information during real-time bidding processes to numerous advertisers without proper user consent. The authority emphasized that companies cannot outsource their data protection responsibilities and must ensure compliance independently. Xandr's defense claimed reliance on Grindr's consent, which was deemed insufficient by the regulator. The fine reflects the serious nature of the breaches and the potential impact on thousands of users. 7 sources 42

Forbrukerrådet

The full story

Extracted Entities

Campaigns (1)

Companies (1)