Should Grindr users worry about what China will do with their data?

In April 2018, the Norwegian Consumer Council filed a complaint against Grindr, the most popular gay dating app in the world, in light of its decision to share its users’ personal data – including HIV status and sexual preferences – with third parties. But the complaint and the outraged reaction overlooked another turn of events: in January 2018, Grindr was acquired by the Chinese corporate group Beijing Kunlun Tech for US$205m.

At the time, this prompted speculation as to whether Chinese authorities could access the data of the app’s 27m users in Europe and overseas. Grindr responded that the privacy of its users remained paramount, and that the government of China could not access data because “Beijing Kunlun is not owned by the Chinese government”. But there are obviously questions about whether that confidence is justified. To make this judgement, it has to be established whether or not Grindr users’ personal data are in fact being transferred to China.

Grindr’s privacy policy says that this data may be shared with a parent company – and that if Grindr is acquired, said owner “will possess the personal data”. Coupled with the Chinese trend towards data localisation requirements, which dictate that data should be processed within China itself, this provision means it may be possible for Grindr users’ personal data to be transferred to China.