Grindr Agrees to £26 Million Settlement Over UK Privacy Lawsuit
Grindr has agreed to pay £26 million to settle a UK privacy lawsuit over allegations it unlawfully shared users’ highly sensitive personal data, including HIV status, with advertising companies.
Dating app Grindr has agreed to a £26 million settlement to resolve one of the United Kingdom’s largest privacy lawsuits involving sensitive personal data, bringing to an end a legal battle brought on behalf of around 12,000 users.
The claim alleged that Grindr unlawfully shared highly confidential information, including users’ HIV status, sexual orientation, ethnicity and other profile data, with third-party advertising and analytics firms without obtaining valid consent. The alleged data-sharing took place primarily between 2018 and 2020, before significant changes were made to the platform’s privacy practices.
The lawsuit was filed in England and Wales by law firm Austen Hays, which argued that the company’s handling of sensitive health and identity information breached UK data protection laws and the principles of the General Data Protection Regulation (GDPR). Because of the deeply personal nature of the allegations, the High Court granted anonymity to all claimants throughout the proceedings.
Although Grindr has agreed to the financial settlement, the company denies liability and says the agreement should not be interpreted as an admission of wrongdoing. In a statement, the company acknowledged that some users had experienced a loss of trust and said it had substantially overhauled its privacy and data governance systems since 2020.
Under the settlement, eligible claimants are expected to receive an average payment of about £2,167 each, although individual compensation may vary. The total settlement will be paid in two instalments, with the first due before the end of 2026 and the second scheduled for March 2027.
The case adds to a growing list of regulatory and legal challenges faced by Grindr over its historical data practices. In 2021, Norway’s data protection authority fined the company for unlawfully sharing user information with advertisers, and UK regulators have also criticized aspects of its previous handling of personal data.
Privacy advocates say the outcome sends an important message to technology companies that collect sensitive personal information. While digital platforms increasingly rely on user data to drive advertising revenue, courts and regulators are making it clear that health and identity data demand the highest standard of consent and protection.
For the wider technology industry, the settlement is more than a costly legal resolution, it reinforces the growing expectation that companies handling intimate personal information must treat privacy as a fundamental right rather than a commercial afterthought.