Xandr Grindr Decision Highlights RTB Consent and Sensitive-Data Risk

An October 12 Norwegian decision against Microsoft Xandr concerning Grindr user data emphasizes that ad intermediaries may bear responsibility for RTB disclosures, sensitive inferences, and consent verification rather than relying automatically on publisher representations. The GDPR-based ruling is not a US enforcement action, but it has direct relevance to US ad-tech vendor diligence, contractual role allocation, sensitive-data controls, and global compliance programs.