Microsoft-Owned Xandr Fined $9.6M Over Grindr User Data
Microsoft's Xandr was fined $9.6M by Norway's data protection authority for processing Grindr user data without consent between 2018 and 2020. The fine, the largest issued by the regulator, highlights risks for ad tech companies handling sensitive data. Xandr has three weeks to appeal.
How this was made
The 30-second read
Why it matters
Regulatory action underscores heightened privacy enforcement risk for companies processing third‑party data.
Market read
The fine is unlikely to move Microsoft’s stock but signals growing regulatory scrutiny for ad‑tech firms.
What to watch
Potential for stricter future enforcement could increase compliance costs for the ad‑tech sector.
Background
Microsoft acquired Xandr in 2022; the fine relates to pre‑acquisition data handling of Grindr users.
Market effects
Highlights regulatory risk for ad‑tech firms handling sensitive data.
Norwegian regulator action may prompt EU‑wide scrutiny of data‑processing practices.
Limited; primarily affects Microsoft’s ad‑tech subsidiary and broader privacy compliance focus.
Counterpoint
Fine size is modest relative to Microsoft’s balance sheet; market impact likely negligible.
Key entities
- CompanyMicrosoft
Parent company of Xandr.
- SubsidiaryXandr
Microsoft's advertising technology unit fined for GDPR violations.
- RegulatorDatatilsynet
Norwegian data protection authority issuing the fine.




