Grindr Agrees £26m UK Settlement Over Alleged Data-Sharing With Ad Partners
Grindr has agreed to pay £26m to settle a UK group action from around 12,000 users who alleged it shared sensitive data with advertising partners — a landmark warning on the cost of ad-targeting data leaks.
What was settled
Grindr has agreed to pay £26m to resolve a UK High Court group action brought by roughly 12,000 users. The claim, filed by law firm Austen Hays in April 2024, alleged the app shared special-category data with advertising partners without proper consent. Grindr continues to dispute the allegations, and the settlement carries no admission of liability.
The numbers are instructive: the sum is payable in two £13m instalments and averages out at roughly £2,167 per claimant. The conduct in question related to an earlier ownership period, and a UK regulator had previously handled the matter with a reprimand rather than a fine.
Why this matters beyond one app
This is a landmark because it shows that sharing sensitive data for ad targeting now carries eight-figure civil liability — separate from, and potentially far larger than, any regulator's fine. Collective litigation has matured into a credible commercial threat in the UK, and adtech data-sharing is squarely in its sights.
Our read: the reprimand-to-£26m gap is the real headline. Regulators may move slowly and cheaply; group litigation does not. Any business that treats a light regulatory touch as the ceiling on its data-sharing risk is mispricing the exposure badly.
What marketers should do now
Three actions follow. First, map exactly what audience data you pass to advertising and measurement partners, and whether any of it could reveal or infer sensitive attributes. Second, re-examine your consent flows — vague or bundled consent is exactly what claimants target. Third, tighten data-sharing agreements so partners' obligations, and your indemnities, are explicit.
The deeper lesson is cultural. "We had a legitimate interest" and "the regulator only reprimanded us" are not defences that reassure a group-action funder. Data minimisation — sharing less, and only what is clearly consented — is now a financial risk control, not just a compliance nicety.
Quick FAQ
How much is Grindr paying and to whom?
£26m, to around 12,000 UK users, in two £13m instalments — about £2,167 per claimant — while denying liability.
What was Grindr accused of?
Sharing special-category user data with advertising partners without proper consent, in a group action filed by law firm Austen Hays in 2024.
What's the lesson for advertisers?
Sharing sensitive or inferable data for ad targeting can trigger costly group litigation far beyond any regulator's fine — audit data flows and consent now.
The eye-opener here isn't the £26m — it's that a regulator once handled the same conduct with a reprimand. UK group litigation has quietly become the real enforcer of data rights, and it doesn't do slaps on the wrist. If you share audience data, share less of it and be certain the consent is real. — Daniel Nikolla, Founder of Merx Marketing
Ad-targeting data leaks now carry eight-figure group-litigation risk — data minimisation is a financial control, not a compliance footnote.
Do you know exactly what audience data your ad partners receive — and whether your consent would survive a group claim?
If you would like to know more about this topic, please contact us on danieln@merxmarketing.co.uk
Sources: The Register, DecisionMarketing, Attitude, PinkNews.
Related reading
Written by Daniel Nikolla, Founder of Merx Marketing Ltd and Marketing Minute
Comments