Norway

Social Garden AS

13,190 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2026-11-10.

Rank · Sector

#305

of 388 in Media, Telecoms and Broadcasting

Rank · Norway

#45

of 57

Rank · All fines

#1,337

of 3,280

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2026-11-10
Controller / Processor: Social Garden AS
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR, Art. 9 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Norwegian DPA has imposed a fine of EUR 13,190 on Social Garden AS. The controller operates dating sites. For users who did not disable visibility in the software settings, their photo, name, age and place of residence could be accessed via the website by non-members, without users having consented. A user complained about this on 30 March 2024. It was found that approximately 17,000 data subjects were affected across all sites operated by the controller. As the sites were partly targeted at the LGBTQ+ community, the accessibility of user data also revealed information about their sexual orientation.