Grindr to pay £26 million to settle UK lawsuit over HIV data sharing
The dating app will compensate 12,000 users after allegations it shared sensitive health data with advertisers under previous ownership.
Grindr has agreed to pay £26 million to settle a group action lawsuit brought by approximately 12,000 users in the United Kingdom. The settlement addresses allegations that the app shared highly sensitive personal information, including the HIV status of its users, with third-party advertising companies.
The total payout will be delivered in two installments: £13 million by the end of 2026 and a further £13 million by the end of March 2027. Based on the number of claimants, the average estimated compensation per person is £2,167. In a US regulatory filing, Grindr stated that the settlement includes no admission of liability and that it disputes the allegations, though it acknowledges the "distress and loss of trust" expressed by UK users regarding the period in question.
Historical Data Practices
The legal dispute centers on historical data practices that occurred before 2020. Specifically, the data sharing took place during a period when Grindr was owned and controlled by the Chinese gaming firm Beijing Kunlun Tech. The current legal action was initiated in April 2024, when the law firm Austen Hays filed the claim at the High Court of England and Wales.
This is not the first time the company has faced scrutiny over its handling of sensitive health data. In 2021, Norway's data protection authority fined Grindr 65 million Norwegian krone (approximately £4.8 million) for similar violations. These recurring issues stem from a pattern of privacy failures that first gained widespread attention in 2018, when it was revealed that the app had shared HIV status with external parties.
Industry Implications
This settlement underscores the severe financial and legal risks companies face when mishandling "special category" sensitive health data. Under modern privacy frameworks, health information is afforded the highest level of protection, and failures to secure this data can lead to massive class-action liabilities.
Furthermore, the case highlights the enduring liability associated with corporate acquisitions. The current management of Grindr is now paying a significant financial penalty for data practices established under the previous ownership of Beijing Kunlun Tech, demonstrating that privacy debts can follow a company long after a change in leadership or ownership.
What's Next
While this settlement resolves the claims for the 12,000 UK users involved in the Austen Hays action, the case serves as a warning to other platforms managing sensitive user metrics. Observers will be watching to see if similar group actions emerge in other jurisdictions where the app operated under the same ownership structure prior to 2020.