The Norwegian data protection authority issued its biggest fine ever ($9,758,476.80 USD).
"– We issued such a high fine in this case because the breaches we identified were very serious. Thousands of users in Norway have been subjected to unlawful sharing of their sensitive data, says Line Coll, Director General of the Norwegian Data Protection Authority.
Xandr acted as an intermediary that relayed the personal data of Grindr users in Norway, including data revealing sexual orientation, to potentially thousands of other companies. Xandr defended itself by saying that they thought Grindr had collected users’ consent, but the Norwegian Data Protection Authority does not accept that actors can simply blame one another."
Read their full press release at https://www.datatilsynet.no/en/news/news-2026/microsoft-company-fined-nok-92-million-for-unlawfully-sharing-personal-data/