Melike Pala
12 October 2026•Update: 12 October 2026
Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr 92 million Norwegian kroner ($9.6 million) for illegally sharing sensitive personal data, the authority announced Monday.
The fine is the highest ever imposed by the Norwegian Data Protection Authority, according to public broadcaster NRK.
The company allegedly shared personal data with potentially thousands of companies through real-time advertising auctions used to deliver targeted advertisements.
"Thousands of users in Norway have been exposed to illegal sharing of sensitive information," Norwegian Data Protection Authority Director Line Coll said in a statement.
Coll described the violations as "very serious," adding that their severity justified the substantial financial penalty.
In a statement conveyed to NRK, a Microsoft spokesperson said protecting users' privacy was a top priority for the company.
The spokesperson noted that the investigation and decision concerned activities predating Microsoft's acquisition of Xandr, adding that regulatory interpretations and practices had since evolved.
The company said it was reviewing the decision and considering its options.
