Norway DPA fines Grindr NOK 65 million for invalid consent
🔥 25 Nov: Grindr won't appeal after the Borgarting Court of Appeal upheld the record NOK 65m (~€5.5m) fine against them for disclosing users' special category personal data to third parties for behavioural advertising without a valid consent.
Nov 25, 2025
—
3 min read
You might also like
'Pay or OK' – 'Consent or Pay' resources
members
–
5 min read
Meta to launch new model in Jan | ICO shares guidance for the public
CJEU C-654/23 Inteligo Media 13 Nov 2025
members
–
7 min read
If a user creates a free account and gets access to articles, newsletters and the option to pay for further content, this falls under Art. 13(1) and (2) ePD as 'sale of a service' and 'direct marketing', and you don't need a legal basis under Art. 6 GDPR, in line with Art. 95 GDPR.
CJEU C-40/17 Fashion ID 29 Jul 2019
members
–
4 min read
You’re a (joint) controller if you use third-party tools on your website that share personal data with the provider – but only for parts where you (jointly) determine purposes and means. If you collect the data, you must inform and get consent, and each controller must pursue a legitimate interest.