Norway fines Microsoft-owned Xandr record $9.6M over sharing of Grindr users' data
Norway's data protection authority fined Microsoft's adtech unit Xandr 92 million crowns (about $9.6 million), its largest fine, for unlawfully relaying sensitive data of Grindr users to advertisers. Microsoft says the conduct predates its acquisition and is reviewing the decision.
1 / 2
The story, neutrally told
Centre · 2Norway's data protection authority fined Microsoft-owned advertising technology company Xandr 92 million Norwegian kroner (about $9.6 million) for illegally sharing sensitive personal data, and announced the decision on Monday 12 October. Anadolu AgencyN “Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr 92 million Norwegian kroner ($9.6 million) for illegally sharing sensitive personal data” Read at Anadolu Agency ↗ CNAN “fined Microsoft's adtech unit Xandr 92 million crowns ($9.61 million)” Read at CNA ↗ Centre · 2It is the highest fine the Norwegian Data Protection Authority has ever imposed, according to public broadcaster NRK as cited by Anadolu. Anadolu AgencyN “The fine is the highest ever imposed by the Norwegian Data Protection Authority, according to public broadcaster NRK.” Read at Anadolu Agency ↗ CNAN “It is the biggest fine the Norwegian authority has issued” Read at CNA ↗ Centre · 2According to CNA, Xandr relayed data revealing the sexual orientation of users of the dating app Grindr to companies in automated ad auctions from July 2018 to April 2020, reaching potentially thousands of advertisers. CNAN “Xandr relayed data revealing the sexual orientation of users of Grindr, a dating app for LGBTQIA+ people, to companies in automated ad auctions from July 2018 to April 2020.” Read at CNA ↗ Anadolu AgencyN “The company allegedly shared personal data with potentially thousands of companies through real-time advertising auctions” Read at Anadolu Agency ↗
Centre · 1Authority Director Line Coll said thousands of users in Norway had been exposed to illegal sharing of sensitive information and called the violations "very serious", saying their severity justified the substantial penalty. Anadolu AgencyN “"Thousands of users in Norway have been exposed to illegal sharing of sensitive information,"”“Coll described the violations as "very serious," adding that their severity justified the substantial financial penalty.” Read at Anadolu Agency ↗ Centre · 1The fine targets the advertising middlemen rather than the app itself, and the regulator said companies that traded in people's data could not pass the blame to others. Xandr said it assumed Grindr had obtained users' consent and never checked; the authority rejected that and ruled Xandr shared legal responsibility with Grindr. CNAN “targets the advertising middlemen rather than the app itself. The regulator said companies that traded in people's data could not pass the blame to others.”“Xandr said it assumed Grindr had obtained users' consent and never checked, the data protection authority said.” Read at CNA ↗ Centre · 1The fine was based on Xandr's revenue, not Microsoft's, which did not own the unit at the time. Xandr has three weeks to appeal. CNAN “The fine was based on Xandr's revenue, not Microsoft's, which did not own the unit at the time. Xandr has three weeks to appeal.” Read at CNA ↗
Centre · 1The authority fined Grindr 65 million crowns over the same breaches in 2021. The case began with a 2020 complaint by the Norwegian Consumer Council and the Austrian group noyb, which called the decision "a valuable precedent". CNAN “The data protection authority fined Grindr 65 million crowns over the same breaches in 2021.”“The case began with a 2020 complaint by the Norwegian Consumer Council, whose research exposed how apps shared user data, and Austrian data privacy organisation noyb, which called the decision "a valuable precedent".” Read at CNA ↗ Centre · 2A Microsoft spokesperson said protecting users' privacy was a top priority, that the investigation concerned conduct predating Microsoft's acquisition of Xandr, and that legal standards and practices had since evolved. The company said it was reviewing the decision and assessing its options. Anadolu AgencyN “The spokesperson noted that the investigation and decision concerned activities predating Microsoft's acquisition of Xandr” Read at Anadolu Agency ↗ CNAN “We are reviewing the decision and assessing our options," it said.” Read at CNA ↗
Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.
Left0 outlets
No left outlet in our sources has covered this story yet.
Centre2 outlets
- Framing
- Both centre outlets report the fine as a regulatory announcement, giving the regulator's and Microsoft's statements. Anadolu stresses the record size and the 'allegedly' shared data; CNA adds the Grindr link, the dates and legal reasoning.
- Emphasis
- Record size of the fine, regulator's statements, Microsoft's response; CNA adds Grindr, the appeal window and the complainants.
- Leaves out or plays down
- Anadolu does not name Grindr, the sexual-orientation data, the 2018–2020 period, the appeal deadline or the complainants; CNA omits Line Coll's quotes.
- Charged language
- “very serious”“a valuable precedent”
- For example
-
“Coll described the violations as "very serious," adding that their severity justified the substantial financial penalty.” — Anadolu Agency
“targets the advertising middlemen rather than the app itself” — CNA
Right0 outlets
No right outlet in our sources has covered this story yet.
What every side reports
- Norway's data protection authority fined Xandr 92 million crowns (about $9.6 million).
- It is the largest fine the authority has issued.
- Microsoft says the conduct predates its acquisition of Xandr and it is reviewing the decision.
Where accounts differ
-
Responsibility for the data sharing
- Centre
- The authority ruled Xandr shared legal responsibility with Grindr; Xandr said it assumed Grindr had obtained consent. Microsoft says the conduct predates its ownership and legal standards have evolved (CNA, Anadolu).
Xandr organisation
Xandr said it assumed Grindr had obtained users' consent and never checked; the regulator rejected this. Microsoft, its owner, says the conduct predates its acquisition and it is considering options.
“Xandr said it assumed Grindr had obtained users' consent and never checked, the data protection authority said.” — CNA
“The company said it was reviewing the decision and considering its options.” — Anadolu Agency
Norway place
Norway's data protection authority, led by Line Coll, calls the violations very serious and says data traders cannot pass blame to others.
“Coll described the violations as "very serious,"” — Anadolu Agency
“The regulator said companies that traded in people's data could not pass the blame to others.” — CNA
Left0 articles
No coverage yet.
Centre2 articles
-
Norway imposes record $9.6M fine on Microsoft-owned Xandr over sharing of personal data
Neutral Short report on the record fine, using NRK and the regulator's quotes, with Microsoft's response.
-
CNAN ·
Norway fines Microsoft's Xandr $9.6 million over Grindr data sharing
Neutral Fuller report centred on Grindr data, the legal reasoning and the appeal window, noting the precedent noyb sees.
Right0 articles
No coverage yet.
- 12 Oct 11:54 First Anadolu AgencyN Norway imposes record $9.6M fine on Microsoft-owned Xandr over sharing of personal data
- 12 Oct 11:56 +2m CNAN Norway fines Microsoft's Xandr $9.6 million over Grindr data sharing
Times are when each article was published, or when we first saw it if the outlet gave no time.