Google hit with €403 million GDPR fine over location tracking
Ireland’s DPC fined Google €403 million over unlawful processing of users’ location data.
Ireland’s Data Protection Commission fined Google €403 million, about $463 million, over location-data processing and ordered compliance within six months. The inquiry covered 25 May 2018 to 4 February 2020 and followed complaints from European consumer groups including BEUC. The DPC found GDPR violations involving lawfulness, fairness, transparency, accountability, and excessive retention across Web & App Activity, Location History, and Location Accuracy. The full decision is still to be published.
- Ireland’s DPC fined Google €403 million, about $463 million.
- The inquiry covered location processing from May 2018 to February 2020.
- Findings cited unlawful, unfair, and insufficiently transparent processing and retention.
- Google must bring the processing into compliance within six months.
Full article222 words · extracted from helpnetsecurity.com · click to collapse
Ireland’s Data Protection Commission (DPC) has fined Google €403 million (about $463 million) over its processing of users’ location data and ordered the company to bring that processing into compliance within six months.
The inquiry examined Google’s practices from May 25, 2018, to February 4, 2020. The DPC launched it on its own initiative in February 2020 after receiving complaints from several European consumer-rights organizations, including the European Consumer Organisation (BEUC).
The regulator found GDPR violations concerning the lawfulness and fairness of Google’s processing of location data through Web & App Activity and Location History.
It also found that Google had violated its accountability obligations by failing to demonstrate compliance with the GDPR’s principle of lawfulness, fairness, and transparency in its processing of personal data through Location Accuracy. Other violations concerned transparency across all three features and the retention of location data through Web & App Activity and Location History.
“As a result of Google’s failures in this regard, individuals could have been unaware that their location was being used to, for example, influence them with ads or to infer their interests, and could lose control over their personal data. The retention of users’ location data for longer than necessary aggravated this loss of control,” Graham Doyle, Deputy Commissioner, said.
The DPC said the full decision would be published later.
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.helpnetsecurity.com/2026/09/21/ireland-google-users-location-data-processing-fine/