Google Slapped with €403M GDPR Fine for Location Data Mishandling
The Irish Data Protection Commission (DPC) has fined Google €403 million for violating the General Data Protection Regulation (GDPR). The fine is related to how Google tracked and stored users' location data between May 25, 2018, and February 4, 2020. This decision marks the fourth-largest sanction since GDPR took effect in 2018.
The DPC investigated three specific Google settings: Web & App Activity, Location History, and Location Accuracy. The regulator found that Google infringed GDPR by processing location data through these features without lawfully and fairly handling users' consent.
Google plans to appeal the ruling on legal grounds it says require further clarification. The company has already signaled its intention to contest the fine in court, which could lead to a reduction of the €403 million amount.