Microsoft-owned ad firm hit with record fine for illegal data sharing

Norway's data protection authority has fined Xandr, an advertising company owned by Microsoft, 92 million Norwegian kroner for illegally sharing sensitive personal data. It is the largest fine the authority has ever issued. The Data Protection Authority (Datatilsynet) said Xandr had no legal basis to process data from Norwegian users of the dating app Grindr. The company passed on information — including sexual orientation — to potentially thousands of businesses through real-time auctions for targeted advertising. "The violations in this case are very serious, which is why we are issuing a high fine. Thousands of users in Norway have been exposed to illegal sharing of sensitive information," said Line Coll, director of the authority. Microsoft said user privacy is its top priority. A company spokesperson told NRK that the case concerns events from before Microsoft bought Xandr, and that the interpretation of the rules has since developed. Microsoft said it is reviewing the decision and considering its options.