Irish regulator fines Google €403 million over location data processing

Ireland's Data Protection Commission has imposed a fine of 403 million euros on Google for violating European Union privacy regulations regarding the handling of user location data. The decision concludes an inquiry that began six years ago, focusing on the company's compliance with the General Data Protection Regulation between 2018 and February 2020.

As Google maintains its European headquarters in Dublin, the Irish regulator serves as the lead authority for the company across the 27-nation bloc. The investigation determined that Google failed to process location data in a lawful, fair, or transparent manner across several of its services and settings.

Specific areas identified by the regulator include the Web & App Activity setting, which tracks user search and browsing history, and the Location History service, which maps the physical movements of mobile phone users. Additionally, the watchdog found that the company’s Location Accuracy feature within the Android operating system did not meet the required standards for transparency and fairness in data processing.

Regulators emphasized that location data constitutes a form of personal information that can be used to infer sensitive details about an individual's habits and movements. The fine reflects the commission's assessment of how these data points were managed during the period under review.

In response to the ruling, Google stated that the case pertains to historical policies that have since been revised. The company noted that it has significantly evolved its data practices since 2019 and has introduced new tools intended to simplify the management of location data for its users.