Live data from Hacker News

Grindr to be fined almost €10M over GDPR complaint

noyb.eu

81–90 of 297 posts

Re: Grindr to be fined almost €10M over GDPR complaint

#81
post #51
post #39

Earlier quoted context omitted.

and agriculture (and agriculture subsidies).

This is a big one for Norway as food security has been a big strategic focus for Norway ever since the British naval blockade against Denmark-Norway during the Napoleonic wars, reaffirmed by the hardships during the Nazi occupation. It's still largely politically untenable in Norway to oppose agriculture subsidies.

There is something a bit sad about having present day policy be determined by the Napoleonic wars.

Re: Grindr to be fined almost €10M over GDPR complaint

#82

Earlier quoted context omitted.

Grindr collects and share quite a lot. Things such as HIV status, sexual preferences, body type, advertising ids, or GPS coordinates. To third parties from the app, and not always using encryption.

I meant that gdpr has no special provisions for LGBT

What do you think would be the chances of having an article 9 provision specifically mentioning 'sexual orientation' if everybody was straight?

https://gdpr-info.eu/art-9-gdpr/

Re: Grindr to be fined almost €10M over GDPR complaint

#83
post #57
post #47

Earlier quoted context omitted.

Thanks for sharing, haven't heard about this organization before but happy to support them now.

It was founded by Max Schrems, whom some of you might now for his lawsuits against Facebook a few years back, which ended the EU-US Safe Harbour and Privacy Shield data trade agreements. It's mainly EU-centric which might be the reason why people here haven't heard of it before. https://en.wikipedia.org/wiki/Max_Schrems

It's incredible what one dedicated man can accomplish through the court system. Makes me wonder what the world would be like if we just spent a little time educating our children about their digital rights in school.

Re: Grindr to be fined almost €10M over GDPR complaint

#84
post #69

> Consent must be unambiguous, informed, specific and freely given. A bit ironic, for a dating app.

Yeah, same thoughts. The gdpr didn’t change much but made small companies like these more vulnerable and web browsing more unbearable. Data is still getting collected and big companies don’t care.

> The gdpr didn’t change much but made small companies like these more vulnerable and web browsing more unbearable. Data is still getting collected and big companies don’t care.

You do know that GDPR fines scale with revenue?

Re: Grindr to be fined almost €10M over GDPR complaint

#85
post #77

They are sending all of their user's data with an "opt out" flag and leaving it to the ad companies to honor it? Slow clap? It also caught my eye that their TOS didn't allow users a choice in data sharing, it was either agree or don't use the app. That might have some wide ramifications, I've encountered many web sites that won't let you past the sharing opt-in until you click agree - i.e. it is impossible to disagre…

> If they have no assets in Norway I imagine it may be hard to collect from them. I thought, but have never verified, that fines given as GDPR enforcement can be collected throughout the EU/EEA. If this is true, and if European courts uphold the fines when Grindr undoubtedly challenge them, then it's my understanding that the Norwegian DPA can have Grindr assets elsewhere in the EEA seized. Does anyone know for sure?

A lawyer would know for sure

Re: Grindr to be fined almost €10M over GDPR complaint

#86

Earlier quoted context omitted.

Why do you say that? The app was founded in LA where I wouldn't describe the gay scene as vulnerable. Is the situation in Normay different?

Being gay can still get you arrested or killed in some countries of the world. Even if not, discrimination of gay people surely is a thing all over the world. Besides that, dating apps of any kind should be held to very high data protection standards for the sometimes very delicate matters.

Totally agree. All dating apps should be held as critically personal information. I was genuinely just curious what the situation was like in Norway.

Re: Grindr to be fined almost €10M over GDPR complaint

#87
post #70

Earlier quoted context omitted.

There are also passport checks when you fly to Norway from other EU countries. For flights between other EU countries you generally just show the QR code on your phone. At least that was my experience, but it's been a few years since I last flew. (Except flights to UK before Brexit, I think they always required passport checks)

> There are also passport checks when you fly to Norway from other EU countries. Except countries in the Nordic Passport Union: https://en.wikipedia.org/wiki/Nordic_Passport_Union You need zero documents to travel between these (well, you need a ticket if you fly or travel by train or a bus).

So I read the article, and in theory there should be no passport checks with other EU countries either because of Schengen, but apparently they have "temporary border controls" since 2015 in violation of the agreements.

Re: Grindr to be fined almost €10M over GDPR complaint

#88
post #64

I'm surprised about: >Consent must also be freely given. The DPA highlighted that users should have a real choice not to consent without any negative consequences. Grindr made use of the app conditional on consenting to data sharing or to paying a subscription fee. I thought that this was allowed. Kind of puts companies depending on advertising in really bad position. One would expect that having choice of paying or…

> I thought that this was allowed.

No, that's one of the big wins of GDPR. You cannot just force the users to sign away their rights.

Re: Grindr to be fined almost €10M over GDPR complaint

#89

They are sending all of their user's data with an "opt out" flag and leaving it to the ad companies to honor it? Slow clap? It also caught my eye that their TOS didn't allow users a choice in data sharing, it was either agree or don't use the app. That might have some wide ramifications, I've encountered many web sites that won't let you past the sharing opt-in until you click agree - i.e. it is impossible to disagre…

There is a Norwegian connection there though. Grindr and Opera (browser) is owned by the same Chinese entrepreneur.

Opera is still headquartered in Norway. Don't know if that helps, but there may be interesting corporate associations there.

Re: Grindr to be fined almost €10M over GDPR complaint

#90
post #70

Earlier quoted context omitted.

EEA has all the laws and requirements of the EU but without representiation. So they have to follow the laws and rules but don't have a voice in the rules. I have no idea what the benefit of the EEA is for it's members other than political that they can say they're not in the EU but there must be some, maybe they don't need to pay in like EU members do?

There are also passport checks when you fly to Norway from other EU countries. For flights between other EU countries you generally just show the QR code on your phone. At least that was my experience, but it's been a few years since I last flew. (Except flights to UK before Brexit, I think they always required passport checks)

> There are also passport checks when you fly to Norway from other EU countries.

This is incorrect. And the presence or absence of these checks is not a EU/EEA matter. The passport free movement is a matter of the Schengen agreement. This is why the UK had passport checks with most of continental Europe back when they were EU members (but not Schengen members).

Norway is a Schengen member, and an EEA member, but not an EU member.

This Venn diagram might help (note that it hasn't been updated for Brexit): https://upload.wikimedia.org/wikipedia/commons/3/3c/Supranat...

Post reply on HN