GDPR allows for fines to scale up to 4% of global annual turnover or up to €20M, whichever is higher. In this case Grindr is on the hook for around 10% of its annual revenue, per the DPA. (Although the sanction is not yet final; Grindr has until February 15 to submit a response before the Datatilsynet issues a final decision.) "We have notified Grindr that we intend to impose a fine of high magnitude as our findings suggest grave violations of the GDPR," said Bjørn Erik Thon, DG of the agency, in a statement.