Norway’s data protection authority has imposed a record fine on Xandr, the advertising technology company acquired by Microsoft, for unlawfully sharing sensitive Grindr user data with thousands of advertisers. The investigation found that information revealing users' sexual orientation was passed on through automated ad auctions between 2018 and 2020.

The ruling shifts scrutiny from apps to the wider adtech industry, raising questions about consent, data privacy,  and accountability. The case also fuels concerns about how personal information could be used as AI systems become more powerful.