Norway Fines Microsoft Subsidiary Xandr 92 Million Kroner
The Norwegian Data Protection Authority has fined Microsoft's Xandr 92 million kroner for processing dating app users' data without a proper legal basis.
The Norwegian Data Protection Authority "Datatilsynet" has imposed a fine of 92 million kroner, or approximately $9.6 million, on Microsoft's subsidiary "Xandr", according to "eSecurity Planet".
The authority stated that the company processed data of "Grindr" app users that could reveal their sexual orientation between July 2018 and April 2020 without a proper legal basis.
The authority explained that "Xandr" assumed that the "Grindr" app had obtained users' consent without actually verifying it, which it considered a breach of the valid consent requirement.
The source noted that this fine is the largest in the history of "Datatilsynet", and that "Xandr" has three weeks to appeal it.
What do these terms mean?
Data Protection: The set of rules that regulate the collection, processing, and privacy of personal data.
Legal Basis: The legitimate reason that permits a company to process user data, including explicit consent.
Valid Consent: Clear and free permission given by the user after being informed of how their data will be used.
Regulatory Fine: A monetary penalty imposed by a regulatory body on those who violate the rules of the law.
Weekly Newsletter
Read between the lines before everyone else. Decode the most important economic, tech, and decision-maker movements in the region.. in 5 minutes every Saturday.
