Grindr Settles UK Data Lawsuit for £26M, Highlighting Privacy Risks

Grindr to pay £26M over data privacy breaches affecting 11,000 users. Founders must prioritize robust data protection to avoid costly legal issues.

Grindr Settles UK Data Lawsuit for £26M, Highlighting Privacy Risks
Grindr Settles UK Data Lawsuit for £26M, Highlighting Privacy Risks

Grindr has agreed to pay £26 million to settle a UK lawsuit over allegations that the LGBTQ+ dating app shared users' sensitive personal information with third parties, including data relating to HIV status. The proposed settlement follows a High Court claim brought against Grindr in 2024 by users who alleged that the company had breached UK privacy laws by sharing sensitive information for commercial purposes.

Mobile phone displaying dating app interface
Mobile phone displaying dating app interface

The case was subsequently served in the US, with the law firm representing claimants saying more than 11,000 people had joined the action. According to a regulatory filing, Grindr will make two £13 million payments, with the first due by the end of December 2026 and the second by March 2027. The settlement does not include an admission of liability by the company.

Grindr has emphasised that the allegations relate to data practices from before 2020, when the company was owned by Chinese firm Kunlun. The claims concern information including users' sexual orientation, ethnicity and HIV status. These categories of data are considered particularly sensitive under privacy regulations.

How User Health Data Was Shared

Grindr allows users to voluntarily disclose their HIV status and the date of their most recent test. The feature is intended to support conversations around sexual health, but the lawsuit alleged that information was shared with third-party analytics companies Apptimize and Localytics and could subsequently be used for advertising purposes. This raised significant concerns about user privacy and consent.

The feature is intended to support conversations around sexual health, but the lawsuit alleged that information was shared with third-party analytics companies and could subsequently be used for advertising purposes.
Person using smartphone with privacy concerns
Person using smartphone with privacy concerns

Previous Scrutiny and Regulatory Actions

The case follows earlier scrutiny of Grindr's data practices. In 2018, reports emerged that the company had shared HIV-related information with analytics providers. Grindr subsequently said it had stopped sharing HIV data with those companies.

Norway's data protection authority later fined the company £5.5 million over its data practices, while the UK Information Commissioner's Office reprimanded Grindr in 2022. These actions demonstrated a pattern of regulatory concern across multiple jurisdictions. The repeated interventions highlighted the seriousness with which data protection authorities viewed the company's handling of sensitive personal information.

Grindr recognised the distress and loss of trust expressed by some UK users over the historical practices.
Data privacy and security concept
Data privacy and security concept

Company Response and Privacy Overhaul

Grindr said in its latest filing that it has overhauled its privacy practices since 2020 and recognised the "distress and loss of trust" expressed by some UK users over the historical practices. The company has positioned the settlement as relating to legacy issues under previous ownership. The overhaul of privacy practices represents a significant shift in the company's approach to handling sensitive user data.

Key Takeaways

  • Dating apps that handle sensitive health information face significant legal and financial consequences if they mishandle user data, with this settlement serving as a major precedent
  • Users should carefully review privacy policies and understand what data is being collected and shared, particularly when voluntarily disclosing sensitive health information
  • Regulatory oversight across multiple countries continues to scrutinise how technology companies handle personal data, with enforcement actions leading to substantial reforms in company practices

Key takeaways

  • 01Grindr is settling a UK data lawsuit for £26 million without admitting liability.
  • 02The legal action involves over 11,000 users claiming privacy law breaches.
  • 03Allegations center on sharing sensitive data like HIV status with third parties.
  • 04The issues occurred before 2020, under prior company ownership.
  • 05This case underscores financial risks of mishandling user data for dating businesses.

Reviewed by an operator. Last updated September 11, 2026. High Intent is led by founder and CEO Bill Alena, backed by a team of industry experts with over 100 years of online dating experience between them.

Questions operators ask

Grindr will pay £26 million to settle the UK lawsuit. This sum will be paid in two installments: the first £13 million by December 2026 and the second £13 million by March 2027. The settlement does not include an admission of liability by the company.

Sources

Loading the conversation…
Talk to the newsroom

Have a tip, a correction, or a pitch?

We're the people who write and edit this newsroom. Write to us directly, we reply within one business day.

Sources are protected. We reply personally.

The Editorial

The weekly editorial for operators in the dating industry.

Long form opinion from people who have built and sold dating businesses. Read past editions.