Ireland Fines Google €403 Million Over Location Data Processing

Summary

Ireland’s DPC fined Google €403 million over location-data processing practices from 2018 to 2020, citing GDPR violations in lawfulness, fairness, transparency, accountability, and data retention. Google must bring its processing into compliance within six months.

Key points

Ireland’s Data Protection Commission imposed a €403 million fine on Google over its processing of users’ location data.
The inquiry covered practices from May 25, 2018, to February 4, 2020, and began after complaints from European consumer-rights organizations.
The DPC found violations involving lawfulness and fairness in processing through Web & App Activity and Location History.
The regulator also cited transparency failures across Web & App Activity, Location History, and Location Accuracy.
The DPC said Google failed to demonstrate GDPR compliance for Location Accuracy and retained location data longer than necessary.
The decision requires Google to bring the processing into compliance within six months; the full decision is due to be published later.

Article Details

Event Type: Regulatory fine and compliance order for Google’s location data processing under GDPR.
Impact: Ireland’s Data Protection Commission fined Google €403 million and ordered it to bring the processing into compliance within six months. The regulator found violations related to lawfulness, fairness, transparency, accountability, and retention across Web & App Activity, Location History, and Location Accuracy. It said users may have been unaware their location data could be used to influence them with ads or infer their interests, and that excessive retention aggravated users’ loss of control over their personal data.