Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Grindr to be fined almost €10M over GDPR complaint

noyb.eu

Post reply on HN
Print view View original

11–20 of 297 posts

Re: Grindr to be fined almost €10M over GDPR complaint

#11

Post by ChuckNorris89 »

tyfon wrote: post #2

Note that this is 10% of revenue so it is quite substantial.

As it should be. If we only fine them fees equivalent to change found between the couch cushions, then they have no incentive to improve.

Especially for private information regarding ones health and sexual activity.

Re: Grindr to be fined almost €10M over GDPR complaint

#12

Post by [deleted] »

that_guy_iain wrote: post #8
progre wrote: post #5

Didn't know Norway has GDPR as they are not in the EU but apparently they have. https://www.lexology.com/library/detail.aspx?g=34dfb199-c9ab...

EEA has all the laws and requirements of the EU but without representiation. So they have to follow the laws and rules but don't have a voice in the rules. I have no idea what the benefit of the EEA is for it's members other than political that they can say they're not in the EU but there must be some, maybe they don't need to pay in like EU members do?

[deleted]

Re: Grindr to be fined almost €10M over GDPR complaint

#13

Post by thefounder »

that_guy_iain wrote: post #10
anthonybennis wrote: post #9

Earlier quoted context omitted.

Benefit is equal access to Common Market as an EU member.

Sorry, I meant benefit of EEA over EU membership.

They have some "special rights" on natural resources. i.e oil, fishery. I think the EU will close that loophole soon.

Re: Grindr to be fined almost €10M over GDPR complaint

#14

Post by cblconfederate »

kristofferR wrote: post #3

GDPR contains special protections for LGBT people, but Grindr shared their users private information with third parties anyway, since they argued that Grindr users might be straight... Pretty shocking and absurd.

no more special than for straight people

Re: Grindr to be fined almost €10M over GDPR complaint

#15

Post by martin8412 »

that_guy_iain wrote: post #10
anthonybennis wrote: post #9

Earlier quoted context omitted.

Benefit is equal access to Common Market as an EU member.

Sorry, I meant benefit of EEA over EU membership.

For Norway the reason is fish. Since they're not in the EU, they don't have to allow others access to fish in their waters.

Re: Grindr to be fined almost €10M over GDPR complaint

#16

Post by Vinnl »

> Grindr is now relying on a new consent system and alleged "legitimate interest" to use data without user consent. This is in conflict with the decision of the Norwegian DPA, as it explicitly held that "any extensive disclosure ... for marketing purposes should be based on the data subject’s consent".

This "legitimate interest" shenanigans is coming up more and more often, where you have a modal with lots of options to opt in to specific forms of tracking which. Most of those are now off by default, as it should be, except that if you scroll down you still see a number of "legitimate interest" ones enabled, even though you can turn them off manually.

Edit: And worst of all is this very confusing pattern with two columns of toggle buttons, one of which concerns "legitimate interest": https://toot.cafe/@peter/105367185171860458

Re: Grindr to be fined almost €10M over GDPR complaint

#17

Post by SiempreViernes »

user-the-name wrote: post #4

"Companies cannot just include external software into their products and then hope that they comply with the law. Grindr included the tracking code of external partners and forwarded user data to potentially hundreds of third parties - it now also has to ensure that these 'partners' comply with the law." – Ala Krinickytė, Data protection lawyer at noyb This has a pretty wide impact, I'd say.

The impact comes from Grindr being responsible for the collected data, obviously just handing that data to a third party to do whatever is not responsible handling of it.

Grindr actually distributed data from persons that had opted-out, reasoning that setting a flag should stop the down-stream processors from touching the data. That is literally the gossip girl using the the "don't tell anyone this" principle of privacy protection!

Post reply on HN