Norway imposes record $9.6M fine on Microsoft-owned Xandr over sharing of personal data

The fine is the highest ever imposed by the Norwegian Data Protection Authority, according to public broadcaster NRK.

The company allegedly shared personal data with potentially thousands of companies through real-time advertising auctions used to deliver targeted advertisements.

"Thousands of users in Norway have been exposed to illegal sharing of sensitive information," Norwegian Data Protection Authority Director Line Coll said in a statement.

Coll described the violations as "very serious," adding that their severity justified the substantial financial penalty.

In a statement conveyed to NRK, a Microsoft spokesperson said protecting users' privacy was a top priority for the company.

The spokesperson noted that the investigation and decision concerned activities predating Microsoft's acquisition of Xandr, adding that regulatory interpretations and practices had since evolved.

The company said it was reviewing the decision and considering its options.