EU Slams Google with $462 Million Fine for Location Data Breach

The European Union has imposed a significant fine on Google for breaching users' location data. The Ireland's Data Protection Commission (DPC) acted on behalf of the EU and fined Google $462 million, which is equivalent to 403 million euros. This penalty stems from Google's infringement of the EU's General Data Protection Regulation (GDPR) on the matter between May 2018 and February 2020.

The DPC ruled that Google infringed the GDPR by processing location data in a way that was not lawful or fair, specifically with regards to its collection through web and app activity and location history. This meant individuals were potentially unaware of how their location data was being used, for instance to influence them with ads or infer their interests.

DPC deputy commissioner Graham Doyle stated that 'as a result of Google's failures... individuals could have been unaware that their location was being used' and that the retention of users' location data for longer than necessary exacerbated this loss of control. Alongside the fine, the regulator ordered Google to bring its processing into compliance within six months.