If they are "established" somewhere in the EU, then all GDPR complaints get forwarded to the DPA for the country where they are established. This is called the

If they are "established" somewhere in the EU, then all GDPR complaints get forwarded to the DPA for the country where they are established. This is called the "one-stop shop mechanism." If the Norwegian DPA is the one handling this case, probably that's because Grindr's EU operations are legally established in Norway. If they don't have an "establishment" in the EU, then I think it's up-for-grabs, and my gut is that NOYB would have preferred to file in France or Germany. This is why GDPR actions against Facebook, Google, etc. all go through the (under-resourced) Irish DPA: US companies are all based there for tax reasons. It's... becoming a problem.