Wire · regulatory
Xandr deleted Grindr records mid-probe, Norway's NOK 92m decision shows
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 13 October 2026 · Fusion42 review
Norway fined Xandr NOK 92 million (approximately €8.5 million) for processing Grindr users' sensitive data without valid legal basis under GDPR, highlighting that Xandr deleted records while under investigation and cannot outsource GDPR accountability. The fine is based on Xandr's own revenue prior to Microsoft's acquisition, with an ongoing appeal possible.
This Wire brief sits within Fusion42's coverage of Adtech, and 6 sources have reported it between 12 Oct 2026 and 13 Oct 2026.
◆ ◆ The Wire takeaway
You must treat GDPR accountability as non-transferable and verify user consent yourself; deleting records mid-investigation is a serious legal risk that puts your business under regulatory threat. This ruling exposes your liability if you rely on contracts to evade responsibility for sensitive data processing.
◆ Coverage
6 sources · first reported 12 Oct 2026 · latest 13 Oct 2026
◆ Topics