Norway DPA fines Grindr NOK 65 million
The Borgarting Court of Appeal has upheld the record NOK 65m (~€5.6m) fine! It can still be appealed to the Supreme Court – we’ll know in about a month.
Oct 21, 2025
—
3 min read
You might also like
'Pay or OK' – 'Consent or Pay' resources
members
–
4 min read
ICO shares guidance for the public | EDPB to discuss "draft 'Consent or Pay' guidelines" on 7 Oct | Dutch court orders Meta to change Facebook and Instagram timeline settings (DSA) |🇬🇧 ICO on Meta ads model | 🇦🇹 Court rules newspaper's Pay or OK model not OK – likely heading for a CJEU referral next
CJEU C-40/17 Fashion ID 29 Jul 2019
members
–
4 min read
You’re a (joint) controller if you use third-party tools on your website that share personal data with the provider – but only for parts where you (jointly) determine purposes and means. If you collect the data, you must inform and get consent, and each controller must pursue a legitimate interest.
CJEU C-654/23 Inteligo Media 27 Mar 2025 AG Opinion
members
–
2 min read
AG Szpunar: If someone creates an online account that includes access to your email newsletters, sending them qualifies as 'direct marketing’ under the ePrivacy Directive Article 13 and is covered by the exception in point 2. Under Article 95 GDPR, a lawful basis under Article 6 isn’t needed.