Grindr Settles UK Lawsuit for £26M Over Alleged HIV Data Sharing

Grindr has agreed to pay £26 million to settle a 2024 UK High Court class action brought by London law firm Austen Hays on behalf of 12,000 users. The lawsuit alleged the dating app breached UK privacy laws by sharing highly sensitive personal information, including users’ HIV status, with third-party advertising and data analytics firms prior to 2020.

The Architecture of a Data Breach

Before early 2020, while under the ownership of Chinese gaming company Beijing Kunlun Tech, Grindr’s infrastructure exposed deeply intimate user telemetry. According to findings corroborated by Norwegian researchers and subsequent data protection investigations, the application transmitted private details—such as HIV status and location data—to external third-party analytics providers including Apptimize and Localytics. This telemetry pipeline allowed a potentially unlimited network of ad tech firms to profile and target users.

https://x.com/Techmeme/status/2097056306817614181

Additional pressure followed closer to home. The UK Information Commissioner’s Office (ICO) reprimanded Grindr in 2022 over its historical data practices. Meanwhile, US national security concerns prompted a forced divestment. Six years ago, investment group San Vicente Acquisition purchased Grindr in a $608m deal, installing new management before the company eventually floated on the New York Stock Exchange via a special purpose acquisition company (SPAC) merger in 2022 at a $2.1bn valuation.

Regulatory Fallout and International Penalties

The £26 million UK settlement is the latest blow in a multi-year regulatory reckoning for the West Hollywood-based company. In 2021, Norway’s data protection authority hit Grindr with a 65m Norwegian krone (£4.8m) fine—amounting to roughly 10% of its global revenues—for violating European data protection rules. Although Grindr appealed the penalty, Norway’s court of appeal officially upheld the decision, ruling that the company’s public-facing claim of not selling personal user information for advertising purposes was clearly misleading.

Photo: theguardian.com

Corporate Restructuring and the Payout Timeline

In a US regulatory filing addressing the resolution of the UK group action, Grindr stated that the settlement involves no findings or admission of liability. While disputing the original allegations, the company acknowledged the deep distress and loss of trust expressed by its UK users regarding the pre-2020 era under previous ownership.

https://x.com/p3b7_/status/2096998672206647806

Financially, the £26 million liability will be disbursed in two distinct tranches. Grindr agreed to pay the first £13m installment by the end of this year, with the remaining £13m scheduled for delivery by the end of March 2027. For the 12,000 claimants represented by Gateley-owned Austen Hays, an equal distribution would yield an average compensation of approximately £2,167 per user.

Gateley noted in public commentary that while Grindr disputes liability, it recognizes the severe impact on user trust. Grindr leadership maintains that the company has fundamentally overhauled its privacy program since 2020. Current executives emphasize a dedicated focus on the unique needs of the queer community, framing the modern platform as a secure space committed to transparency, strict user control, and responsible data architecture.