Norway

Grindr LLC

6,000,000 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2021-12-13.

Rank · Sector

#34

of 372 in Media, Telecoms and Broadcasting

Rank · Norway

of 54

Rank · All fines

#63

of 3,106

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2021-12-13
Controller / Processor: Grindr LLC
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA has imposed a fine of EUR 6,000,000 on Grindr LLC. The authority found that Grindr was processing special categories of personal data regarding the sexual orientation of data subjects. This processing took place for marketing purposes. As the data subjects using the controller's dating app were specifically targeted members of the LGBTQIA+ community they did not have the option to opt out of their personal data being shared with third parties for marketing purposes. This rendered their consent to the processing invalid. The Oslo Appeals Court upheld the fine in 2025.

Open original source Links to the regulator's original publication or another source.