Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Grindr shared highly sensitive personal data — including users' HIV status — with third-party advertising partners without adequate legal basis or transparency, violating core data protection principles. This type of special category data carries the highest level of legal protection under GDPR and equivalent UK law, meaning any processing requires explicit, informed consent. The failure to implement technical and contractual controls over third-party data flows exposed users to potential discrimination, stigma, and serious personal harm. This case illustrates that commercial data-sharing practices must be rigorously audited against privacy obligations, especially when sensitive health information is involved. The £26 million settlement underscores that regulatory and litigation risk from data misuse can far exceed any short-term commercial gain.