Norwegian Court Upholds DPA Decision Against Grindr
Dating app Grindr lacked valid consent to disclose users' personal data to its advertising partners, Norway's Borgarting Court of Appeal ruled Tuesday. It upheld findings by the District Court, Norwegian DPA and Privacy Appeal Board, including a fine of 65 million Norwegian krone ($6.5 million), the DPA announced.
Sign up for a free preview to unlock the rest of this article
Privacy Daily provides accurate coverage of newsworthy developments in data protection legislation, regulation, litigation, and enforcement for privacy professionals responsible for ensuring effective organizational data privacy compliance.
In addition, the Court of Appeal upheld a lower panel's decision that information about the use of the app falls into a special category of personal data. Grindr has one month to appeal.
A Grindr spokesperson emailed Privacy Daily that the company is disappointed with the appellate decision and is considering its options. Grindr remains "committed to protecting user privacy and operating in full compliance with data protection laws."
In 2020, the Norwegian Consumer Council filed a complaint against the app with the DPA, alleging that it disclosed personal data to third parties for marketing purposes. The DPA concluded that Grindr revealed personal data to third parties without valid consent. In addition, the watchdog said, the fact that someone is a Grindr user was found to constitute data about their sexual orientation or sex life.