Grindr Pays £26 Million Over HIV Status Data Sharing

Grindr has agreed to pay £26 million (approximately $32.7 million USD) to settle allegations that it breached UK privacy laws by sharing sensitive user data, including HIV status, with third parties. The settlement resolves a long-running claim brought by a group of users who alleged that the dating app unlawfully disclosed their personal information. The lawsuit, filed in the UK, centered on Grindr's practices between 2018 and 2021, during which time it is claimed the company shared data with advertisers and data brokers without adequate consent. This data reportedly included highly sensitive personal details, such as users' HIV status, sexual orientation, and location.

The legal action was brought forward by a group of Grindr users who argued that the company's data handling practices violated their privacy rights under the UK's Data Protection Act 2018 and the General Data Protection Regulation (GDPR). These regulations impose strict rules on how personal data, particularly sensitive categories like health information, can be collected, processed, and shared. The claimants contended that Grindr failed to obtain explicit and informed consent from users before sharing this information, thereby exposing them to potential discrimination and harm. The settlement amount of £26 million is intended to compensate these users for the distress and potential risks they faced due to the alleged data breaches.

Grindr, a popular location-based social networking and online dating application for gay, bi, trans, and queer people, has faced scrutiny over its data privacy practices in the past. In 2018, the app faced criticism and investigations in Norway and the US for sharing user data, including HIV status, with third-party companies without explicit consent. The Norwegian Data Protection Authority fined Grindr $11.7 million USD for unlawful data sharing practices. This latest settlement in the UK underscores the ongoing global concern regarding the privacy of sensitive personal data, particularly within the digital realm and the online dating industry. The agreement, which was announced this week, aims to bring closure to the legal dispute and address the concerns raised by the affected users regarding the safeguarding of their personal information.