Grindr to pay £26m to settle UK lawsuit over sharing users' HIV status

Grindr, the world's largest dating application for LGBTQ+ individuals, has agreed to pay £26 million to settle a class-action lawsuit alleging that it shared users' personal information, including HIV status, with third parties. The settlement, disclosed in a filing to the US Securities and Exchange Commission (SEC), does not include any admission of liability.

The legal case began in 2024 when a claim was filed in the UK High Court in London. It was later served in the United States, and the law firm representing the claimants said that more than 11,000 individuals had joined the action. The claimants alleged that Grindr misused their personal data, passing on sensitive details to third-party companies without proper consent.

According to Grindr's SEC filing, the settlement was reached on 2 September. The company will make two payments of £13 million each—the first by 31 December and the second by 31 March 2027.

Grindr has stressed that the allegations relate to "historical data practices" from before 2020, when the company was owned by the Chinese firm Kunlun. In its filing, the company stated: "While Grindr disputes the allegations, it recognizes and acknowledges the distress and loss of trust expressed by some of its UK users regarding that pre-2020 period."

The case raises important questions about the handling of sensitive personal data in the digital age. HIV status is classified as a special category of data under the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018. Processors of such data must obtain explicit consent and are held to strict standards of accountability. Unauthorised disclosure of this type of information can result in severe consequences for individuals, including discrimination and social stigma.

The claimants in this case argued that Grindr shared their HIV status and other personal details with third parties, including analytics and advertising companies, without adequate transparency. They contended that this practice violated their privacy rights and left them feeling distressed and vulnerable.

Data privacy experts view this settlement as a reminder to technology companies of the legal and reputational risks associated with mishandling user information. The case also reflects a broader trend of increased litigation and regulatory scrutiny over data protection practices, particularly for platforms that collect health-related or intimate data.

Privacy advocates have pointed out that while the settlement provides compensation to affected users, it does not resolve the underlying legal questions, as the company did not admit liability. Legal experts note that settling without admission of liability is a common practice to avoid the cost and uncertainty of a full trial.

Grindr did not make any additional public comments beyond its regulatory filing. The company said the settlement is not expected to have a material impact on its financial condition. Its current data handling practices are not part of the claims, which specifically pertain to the pre-2020 period.

The settlement marks the end of a significant legal episode for Grindr, but it also highlights the ongoing challenge of balancing user privacy with commercial interests in the technology sector. For millions of users of dating apps, the case serves as a reminder to remain cautious about the personal information they share online and the rights they have to control it.