Google Slapped with €403 Million Fine Over Location Data Breach
The Irish Data Protection Commission (DPC) has imposed a €403 million fine on Google for breaching European data protection law. The DPC found that Google's processing of location data through Web & App Activity, Location History, and Location Accuracy infringed the General Data Protection Regulation (GDPR).
The alleged breaches occurred between May 2018, when the GDPR came into effect, and February 2020, when the regulator launched its investigation. During this time, Google tracked users' location data without their explicit consent in some cases.
Google has been ordered to bring its location data processing into compliance with European data protection law within six months. The company plans to appeal the fine, stating that it concerns 'historical policies' and has since evolved its practices on managing location data.