Google Slapped with €403 Million Fine for Location Data Mishandling

The Irish Data Protection Commission has fined Google €403 million for violating the EU General Data Protection Regulation (GDPR) related to its processing of users' location data.

The decision comes after an inquiry that began in February 2020, following complaints filed by seven European consumer organisations in November 2018.

The DPC found that Google infringed the GDPR's requirements on lawfulness and fairness in its processing of location data through Web & App Activity and Location History, as well as transparency requirements across all three features.

Google has stated that it has changed its location data practices since 2019, but the DPC assessed their compliance during the 2018-2020 period and has ordered further compliance measures within six months.