Google Slapped with €403m Fine for Location Data Handling Failures

Google Ireland has been fined €403m ($461m) by the Irish Data Protection Commission (DPC) for its handling of location data. The investigation, which began in February 2020, examined Google's processing of location data through three features: 'Web & App Activity', 'Location Accuracy', and 'Location History'.

The DPC found that Google breached the General Data Protection Regulation (GDPR) in several ways. Specifically, it failed to observe the required lawfulness and fairness in processing location data for 'Web & App Activity' and 'Location History', and was unable to demonstrate compliance with these principles regarding 'Location Accuracy'.

The regulator also cited failures in meeting transparency obligations for all three features, and in the retention of location data associated with 'Web & App Activity' and 'Location History'. Google has been instructed to bring its processing into compliance with the GDPR within six months.