EU regulator fines Google Ireland over location-data GDPR violations

After a six-year investigation prompted by consumer-rights groups, Ireland’s Data Protection Commission determined that Google Ireland breached GDPR rules on location tracking. The probe covered web and app activity, location history and accuracy from May 25 2018 to February 4 2020, finding that many users were unaware their whereabouts were being exploited for advertising and profiling. As a result, the DPC levied administrative fines totaling €403 million and gave Google six months to bring its data-processing into compliance.

Deputy commissioner Graham Doyle emphasized that location data can both enhance services and expose deeply private information. This sanction ranks as the fourth-largest DPC fine since the regulation’s inception. Three other large-scale inquiries into Google remain at advanced stages.