Live data from Hacker News

Grindr to be fined almost €10M over GDPR complaint

noyb.eu

91–100 of 297 posts

Re: Grindr to be fined almost €10M over GDPR complaint

#91
post #25

Earlier quoted context omitted.

Are gay men in Norway a very vulnerable community? My impression was no, but I’m willing to have that countered

They have more disposable income than the median.

Could you cite that? If you're comparing median to median, I find that very unlikely.

There are plenty of soft barriers to progress for gay men.

Re: Grindr to be fined almost €10M over GDPR complaint

#92
post #16

> Grindr is now relying on a new consent system and alleged "legitimate interest" to use data without user consent. This is in conflict with the decision of the Norwegian DPA, as it explicitly held that "any extensive disclosure ... for marketing purposes should be based on the data subject’s consent". This "legitimate interest" shenanigans is coming up more and more often, where you have a modal with lots of options…

It’s almost impressive what these people have created. Now, when I stumble across the rare “Reject All” button on one of those pop ups, I don’t know if they even really mean “all” or if it keeps the trackers under “legitimate interests” enabled because they’re... “legitimate”. So the only safe option ends up being disabling all of them manually, which is absurd when these websites list hundreds and hundreds of trackers.

It’s as if they used decades of HCI research precisely to make the user experience as horrible as possible. No wait, I’m sure they did exactly that.

Re: Grindr to be fined almost €10M over GDPR complaint

#93

Here[1] is the press release from the Norwegian Consumer Council, which initiated this along with noyb based on their earlier findings[2]. [1]: https://www.forbrukerradet.no/news-in-english/historic-victo... [2]: https://www.forbrukerradet.no/side/new-study-the-advertising...

And previous discussion [3] here on HN from the complaint filed last year.

[3]: https://news.ycombinator.com/item?id=22043209

Re: Grindr to be fined almost €10M over GDPR complaint

#94
post #51

Earlier quoted context omitted.

This is a big one for Norway as food security has been a big strategic focus for Norway ever since the British naval blockade against Denmark-Norway during the Napoleonic wars, reaffirmed by the hardships during the Nazi occupation. It's still largely politically untenable in Norway to oppose agriculture subsidies.

There is something a bit sad about having present day policy be determined by the Napoleonic wars.

At this point it's more of a curiosity than something most people are aware of. It was the starting point of a realisation that choking off just a handful of trade routes could starve the country.

Today the main reminder is that Norwegian school children still tend to learn the epic poem "Terje Vigen" by Ibsen, about a man who braves the blockade to feed his family and is captured - coupled with food security being a talking point in other subjects. It's not pushed very hard, and many probably at this point don't even make the connection.

The main modern justification is WW2, where the subject of food security gets reinforced with stories of bread made with bark etc., and post-war rationing.

Couple that with the constant fear of the Soviet Union (to the point that when growing up, we had regular air raid siren tests - today they're so rare the newspapers write articles to explain what they are) only reducing to unease about Russia, and food security is still a political topic.

Re: Grindr to be fined almost €10M over GDPR complaint

#95
post #19

Great news! They have been preying on a very vulnerable community.

'Preying' is a bit much. Nobody is forced to use grindr and the whole point of the app is to meet same-sex people geographically close to you. This whole case seems to revolve around whether the 'Legitimate Interest' legal basis is valid or not. It was only a matter of time before it was legally challenged.

Animals higher up on the food chain don't need force. Many get to know the habits of their prey to entice them without forcing them to do anything. Prey is a very appropriate word when talking about this kind of marketing and manufactured consent.

Re: Grindr to be fined almost €10M over GDPR complaint

#96
post #16

> Grindr is now relying on a new consent system and alleged "legitimate interest" to use data without user consent. This is in conflict with the decision of the Norwegian DPA, as it explicitly held that "any extensive disclosure ... for marketing purposes should be based on the data subject’s consent". This "legitimate interest" shenanigans is coming up more and more often, where you have a modal with lots of options…

I've also had "legitimate interest" used as a catch-all reply when you raise any concerns internally.

It reminds me of "reasonable" wording in English law.

Re: Grindr to be fined almost €10M over GDPR complaint

#97
I'm pretty happy that GDRP finally starts being used to limit that type of data agglutination. Max Schrems and NYOB are doing a great job pushing for better privacy protection in Europe. I just hope that the big ones also either change their behavior or get forced to account for it.

Re: Grindr to be fined almost €10M over GDPR complaint

#98
post #25

Earlier quoted context omitted.

They have more disposable income than the median.

Could you cite that? If you're comparing median to median, I find that very unlikely. There are plenty of soft barriers to progress for gay men.

Compare to the median of straight men+women, or the median of straight men? In median, even in Norway women earn on average 80% of men. Assuming sexual orientation otherwise doesn't matter, there should then be a difference between gay men and straight people in general...

Re: Grindr to be fined almost €10M over GDPR complaint

#99
post #64

I'm surprised about: >Consent must also be freely given. The DPA highlighted that users should have a real choice not to consent without any negative consequences. Grindr made use of the app conditional on consenting to data sharing or to paying a subscription fee. I thought that this was allowed. Kind of puts companies depending on advertising in really bad position. One would expect that having choice of paying or…

> I thought that this was allowed. No, that's one of the big wins of GDPR. You cannot just force the users to sign away their rights.

How is giving choice between paying with money or paying with data forcing users into signing their rights away?

Re: Grindr to be fined almost €10M over GDPR complaint

#100

Earlier quoted context omitted.

The impact comes from Grindr being responsible for the collected data, obviously just handing that data to a third party to do whatever is not responsible handling of it. Grindr actually distributed data from persons that had opted-out, reasoning that setting a flag should stop the down-stream processors from touching the data. That is literally the gossip girl using the the "don't tell anyone this" principle of priv…

The thing is, third-party SDKs often do data collection on their own. Or, even if they don't, they could do so, and you don't really know if they do or not.

Well, now the GDPR gives you 10% of your revenue as a reason for not using SDKs that will not give you control of data collection.

You always had "respect the privacy of users" as a reason not to use them before, but we all know how well that worked.

Post reply on HN