Dating app @Grindr will be fined €10 million, 10% of global turnover for sharing personal data with commercial third parties in breach of the #GDPR, as a result of our legal complaint & report. forbrukerradet.no/news-in-englis…#privacy#adtech
2/ For context, see our work that led to this historic decision:
3 / working with, @noyb_eu & @MaxSchrems, we filed a complaint in January 2020. The decision by the DPA clearly states that Consent must be unambiguous, informed, specific and freely given. This is not the case with Grindr noyb.eu/en/gay-dating-…
4/ 40+ consumer & human rights group took action when we published our report last year. Nine filed a legal complaint with the @FTC. It is clear to anyone who looks at the adtech industry, it violates basic human rights, and have to change: citizen.org/article/popula…
5/ This decision should have enormous consequences for digital services that rely on behavioural advertising, as they can no longer deny access to their service if users don’t want share personal data with #adtech.
6. This "establishes strict legal requirements on a whole industry that profits from collecting and sharing information about our preferences, location, purchases, physical and mental health, sexual orientation and political views.”
8. Also, doing advanced, technical analysis of apps, is very difficult, & is closed to impossible to do for "normal" consumers. We had invaluable help from security firm mnemonic, researcher & adtech experts @WolfieChristl & @thezedwards
10. To be clear, this is a notification of a decision to Grindr from the DPA. They will have until the 15th of February to respond. But reading the decision, it will be hard to see what they can say that will reverse the assessment.
11. @johnnyryan, expert on adtech in particular, is analysing the decision:
12. Would like to add, that we are really happy that we have a data protection authority that show that action speaks louder than words when it comes to the #GDPR. Thank you @Datatilsynet for enforcing our fundamental rights!
1. [thread] We are filing legal complaints against six companies based on our research, revealing systematic breaches to privacy, by shadowy #OutOfControl#adtech companies gathering & sharing heaps of personal data. forbrukerradet.no/out-of-control…#privacy
2. We observed how ten apps transmitted user data to at least 135 different third parties involved in advertising and/or behavioural profiling, exposing (yet again) a vast network of companies monetizing user data and using it for their own purposes.
3. Dating app @Grindr shared detailed user data with a large number of third parties. Data included the fact that you are using the app (clear indication of sexual orientation), IP address (personal data), Advertising ID, GPS location (very revealing), age, and gender.