News for hackers. Stuff that matters.
Re:Grindr to be fined almost €10M over GDPR complaint by zxcvbn4038 on Tuesday January 26, 2021 @06:30AM (#25914617)
They are sending all of their user's data with an "opt out" flag and leaving it to the ad companies to honor it? Slow clap?

It also caught my eye that their TOS didn't allow users a choice in data sharing, it was either agree or don't use the app. That might have some wide ramifications, I've encountered many web sites that won't let you past the sharing opt-in until you click agree - i.e. it is impossible to disagree. It is a completely foreign concept for US companies.

Wikipedia says Grindr is based in California, US. I wonder if they will pay the fine or refuse. If they have no assets in Norway I imagine it may be hard to collect from them.

Re:Grindr to be fined almost €10M over GDPR complaint by jononor on Tuesday January 26, 2021 @08:43AM (#25915662)
If they try that, I guess the Norwegian authorities will escalate through EU - either on the EU level, or by collaboration with larger national agencies such as in Germany. This is not a case isolated to Norway, and the agency seems to see it as such.
Re:Grindr to be fined almost €10M over GDPR complaint by fifilura on Tuesday January 26, 2021 @06:46AM (#25914718)
There is a Norwegian connection there though. Grindr and Opera (browser) is owned by the same Chinese entrepreneur.

Opera is still headquartered in Norway. Don't know if that helps, but there may be interesting corporate associations there.

Re:Grindr to be fined almost €10M over GDPR complaint by nitrobeast on Tuesday January 26, 2021 @08:28AM (#25915514)
Grindr’s Chinese owner has sold it to a US owner, forced by CFIUS (https://www.theverge.com/platform/amp/2020/3/6/21168079/grin...).
Re:Grindr to be fined almost €10M over GDPR complaint by ChrisRR on Tuesday January 26, 2021 @09:57AM (#25916411)
Ironically that site asks you to agree to tracking cookies, with no option to opt out
Re:Grindr to be fined almost €10M over GDPR complaint by gspr on Tuesday January 26, 2021 @06:34AM (#25914639)
> If they have no assets in Norway I imagine it may be hard to collect from them.

I thought, but have never verified, that fines given as GDPR enforcement can be collected throughout the EU/EEA. If this is true, and if European courts uphold the fines when Grindr undoubtedly challenge them, then it's my understanding that the Norwegian DPA can have Grindr assets elsewhere in the EEA seized.

Does anyone know for sure?

Re:Grindr to be fined almost €10M over GDPR complaint by lmkg on Tuesday January 26, 2021 @11:48AM (#25918003)
If they are "established" somewhere in the EU, then all GDPR complaints get forwarded to the DPA for the country where they are established. This is called the "one-stop shop mechanism."

If the Norwegian DPA is the one handling this case, probably that's because Grindr's EU operations are legally established in Norway. If they don't have an "establishment" in the EU, then I think it's up-for-grabs, and my gut is that NOYB would have preferred to file in France or Germany.

This is why GDPR actions against Facebook, Google, etc. all go through the (under-resourced) Irish DPA: US companies are all based there for tax reasons. It's... becoming a problem.

Re:Grindr to be fined almost €10M over GDPR complaint by donohoe on Tuesday January 26, 2021 @07:38AM (#25915132)
Not a lawyer, but I believe this is true
Re:Grindr to be fined almost €10M over GDPR complaint by killingtime74 on Tuesday January 26, 2021 @06:42AM (#25914693)
A lawyer would know for sure
Re:Grindr to be fined almost €10M over GDPR complaint by Blikkentrekker on Tuesday January 26, 2021 @09:36AM (#25916171)
I think you underestimate how specialized law can be.

I have a relative who is a lawyer and legal attorney who would definitely not know this and when asked would answer that it is not his speciality and that he would have to do more research.

He's an attorney in employment law, and I asked him some things about criminal law and he did not know, and when pressed to make a guess, his guess was wrong.

It seems that law is quite complicated, and that lawyers have their specialities.

Re:Grindr to be fined almost €10M over GDPR complaint by killingtime74 on Wednesday January 27, 2021 @12:14AM (#25924576)
Yes and it seems like this would be an even more specialised area. if we don’t even know which lawyer to ask how can we even hope to follow the law meaningfully