Gay dating app hit with $7mn fine for data breach
Grindr, an LGBT+ online dating application, has been fined around $7.14 million by the Norwegian regulator for not complying with the data protection rules on consent.
On Wednesday, Norway's Data Protection Authority (DPA) gave Grindr a 65 million Norwegian crown ($7.14 million) fine, reduced from the original 100 million crown punishment handed down in January.
The DPA said that the decision to reduce the fine to 65 million crowns came in light of new information on the company's finances, as well as changes Grindr has made “to remedy the deficiencies in their previous consent-management platform.”
However, the DPA concluded that the LGBT+ dating app had failed to comply with General Data Protection Regulation (GDPR) laws by disclosing user data to advertisers without valid consent.
“Our conclusion is that Grindr has disclosed user data to third parties for behavioural advertisement without a legal basis,” the head of the DPA's international department, Tobias Judin, said in a statement.
The DPA said that consent collected by Grindr between July 2018 and April 2020 for the use of private data did not allow it to share data with advertisers.
According to a report from the Norwegian Consumer Council (NCC) in January 2020, the data shared by Grindr included details such as users' IP addresses, GPS locations, ages, and genders.
The reports added that sharing such data could be a matter of physical safety in countries where homosexuality is prohibited.
The DPA said that the decision to reduce the fine to 65 million crowns came in light of new information on the company's finances, as well as changes Grindr has made “to remedy the deficiencies in their previous consent-management platform.”
However, the DPA concluded that the LGBT+ dating app had failed to comply with General Data Protection Regulation (GDPR) laws by disclosing user data to advertisers without valid consent.
“Our conclusion is that Grindr has disclosed user data to third parties for behavioural advertisement without a legal basis,” the head of the DPA's international department, Tobias Judin, said in a statement.
The DPA said that consent collected by Grindr between July 2018 and April 2020 for the use of private data did not allow it to share data with advertisers.
According to a report from the Norwegian Consumer Council (NCC) in January 2020, the data shared by Grindr included details such as users' IP addresses, GPS locations, ages, and genders.
The reports added that sharing such data could be a matter of physical safety in countries where homosexuality is prohibited.
AI Disclaimer: An advanced artificial intelligence (AI) system generated the content of this page on its own. This innovative technology conducts extensive research from a variety of reliable sources, performs rigorous fact-checking and verification, cleans up and balances biased or manipulated content, and presents a minimal factual summary that is just enough yet essential for you to function as an informed and educated citizen. Please keep in mind, however, that this system is an evolving technology, and as a result, the article may contain accidental inaccuracies or errors. We urge you to help us improve our site by reporting any inaccuracies you find using the "Contact Us" link at the bottom of this page. Your helpful feedback helps us improve our system and deliver more precise content. When you find an article of interest here, please look for the full and extensive coverage of this topic in traditional news sources, as they are written by professional journalists that we try to support, not replace. We appreciate your understanding and assistance.
