Data Protection Commission (Organization): news timeline & CVEs

Data Protection Commission fines Google €403M over processing of location data

Irish DPC fines Google €403 million for GDPR violations in processing of user location data.

Ireland's Data Protection Commission fined Google €403 million after an own-volition inquiry into location data processing in Web & App Activity, Location History, and Location Accuracy from May 2018 to February 2020. The DPC found infringements of lawfulness, fairness, transparency, accountability, and retention obligations, and ordered Google to bring processing into compliance within six months. The inquiry was launched in February 2020 following complaints from consumer rights organizations including BEUC.

Hacker News · securityupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 22:33 UTC · 5d agoPolicy & legal 11 sources HN 21↑ · 3 comments1

Google Fined €403 Million Over Location Data Practices

Ireland's DPC fined Google 403 million euros for GDPR violations involving location data.

Ireland's Data Protection Commission fined Google 403 million euros for GDPR violations involving location data processed from 25 May 2018 to 4 February 2020. The inquiry, opened in February 2020 after complaints including from BEUC, examined Web & App Activity, Location History, and Android's Location Accuracy feature. Commissioners found failures of lawfulness, fairness, and transparency, plus retention longer than allowed, and said users may not have known location data was used for ads and profiling. Google was given six months to comply. The penalty is the DPC's fourth-largest EU privacy fine.

Security Affairsupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 20:20 UTC · 5d agoPolicy & legal 11 sources

EU data regulator fines Google more than $460 million for location data violations

Ireland's data regulator fined Google €403 million for GDPR violations in processing users' location data.

Ireland’s Data Protection Commission said it will fine Google more than €403 million ($462 million) for location-data processing, closing an inquiry opened in February 2020. The case examined web and app activity, location history, and location accuracy from May 2018, when the GDPR took effect, through February 2020. Regulators found failures of lawfulness, fairness, transparency, and accountability, including retention longer than necessary, and ordered Google to change its practices within six months. It is the DPC’s first fine against Google; the company had not commented.

The Recordupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 19:15 UTC · 5d agoPolicy & legal 11 sources1

Google Hit With $463 Million Fine for EU Location Data Rule Breach

Ireland's privacy regulator fined Google 403 million euros for unlawful processing of EU location data.

Ireland's Data Protection Commission fined Google 403 million euros ($463 million) for breaching the EU General Data Protection Regulation by mishandling location data. Investigators found Google did not lawfully, fairly, or transparently process data in Web & App Activity, Location History, and Android's Location Accuracy feature between GDPR's 2018 start and February 2020. Google said the case concerns historical policies updated from 2019 onward. The penalty is the Irish watchdog's fourth-largest EU privacy fine, and three further Google investigations remain open.

SecurityWeekupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 17:19 UTC · 5d agoPolicy & legal 11 sources

Google Fined €403 Million Over GDPR Violations Tied to Location Data

Ireland's DPC fined Google €403 million for GDPR failures in three location-data features.

Ireland's Data Protection Commission fined Google €403 million for GDPR violations in Web & App Activity, Location History, and Location Accuracy from May 2018 to February 2020, and ordered compliant processing within six months. For the first two features the DPC found breaches of lawful and fair processing, transparency, and storage limitation; for Location Accuracy it found transparency and accountability failures. The fine, the DPC's fourth-largest, is payable only after an Irish court confirms it, and Google may appeal within 28 days. Google said the case concerns historical policies updated since 2019; the inquiry began in February 2020 after November 2018 complaints from BEUC and other consumer groups.

The Hacker Newsupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 16:57 UTC · 5d agoPolicy & legal 11 sources1

Google Fined €403 Million for GDPR Violations Over Users’ Location Data

Ireland’s DPC fined Google €403 million for GDPR violations in processing users’ location data.

Ireland’s Data Protection Commission fined Google Ireland Limited €403 million on September 21, 2026, for GDPR violations involving location data and ordered compliance within six months. The inquiry, opened in February 2020 after complaints including from BEUC, covered processing from May 25, 2018, through February 4, 2020, across Web & App Activity, Location History, and Android Location Accuracy. The DPC found unlawful and unfair processing, transparency failures, excessive retention, and accountability gaps. Google said the case concerned historical policies updated since 2019; the full decision and penalty breakdown were not yet published.

Cyber Security Newsupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 16:43 UTC · 5d agoPolicy & legal 11 sources

Google hit with €403 million GDPR fine over location tracking

Ireland’s DPC fined Google €403 million over unlawful processing of users’ location data.

Ireland’s Data Protection Commission fined Google €403 million, about $463 million, over location-data processing and ordered compliance within six months. The inquiry covered 25 May 2018 to 4 February 2020 and followed complaints from European consumer groups including BEUC. The DPC found GDPR violations involving lawfulness, fairness, transparency, accountability, and excessive retention across Web & App Activity, Location History, and Location Accuracy. The full decision is still to be published.

Help Net Securityupdated Sep 24, 08:31 UTC · 2d agofirst Sep 21, 12:23 UTC · 5d agoPolicy & legal 11 sources1

Data Protection Commission

Timeline7 articles

Appears with