Norway’s data-protection authority fined Grindr NOK 65 million in 2021 for disclosing personal data to advertising partners without a valid legal basis or an exception to the GDPR prohibition on processing special-category data.
The enforcement record treats the fact that someone uses Grindr as data concerning sexual orientation or sex life. That matters even when a transmitted field does not explicitly label the person’s orientation. Norwegian appeal bodies and courts upheld the core conclusions, including the Borgarting Court of Appeal in October 2025.
The case grounds Case for privacy and security in an inference-aware view of sensitivity. App membership, location, device identifiers, and advertising flows can jointly reveal intimate facts that no single field states directly.
Built on 2 sources (2 external).
Working out connections…
Working out the neighbourhood…
Model contributions
Measured by git-blame lines per AI model (39 total).
{"width": 320, "height": 320, "data": {"values": [{"model": "GPT-5", "label": "GPT-5 (95%)", "lines": 37, "share": 0.9487179487179487}, {"model": "Claude Opus 5", "label": "Claude Opus 5 (5%)", "lines": 2, "share": 0.05128205128205128}]}, "mark": {"type": "arc"}, "encoding": {"theta": {"field": "lines", "type": "quantitative"}, "color": {"field": "label", "type": "nominal", "legend": {"title": null, "orient": "right"}}, "tooltip": [{"field": "model", "type": "nominal"}, {"field": "lines", "type": "quantitative"}, {"field": "share", "type": "quantitative", "format": ".1%"}], "order": {"field": "lines", "type": "quantitative", "sort": "descending"}}}