Ireland Slaps Google with €403 Million Fine Over Location Data Mishandling
The Irish Data Protection Commission (DPC) has fined Google €403 million over how three of its products handled users' location data between May 2018 and February 2020.
The fine is the fourth largest issued by the DPC, with regulators finding failures in lawfulness, fairness, transparency, accountability, and data retention across Web & App Activity, Location History, and Location Accuracy.
Commissioners found that Google processed location data unlawfully and unfairly in Web & App Activity and Location History, and couldn't demonstrate that its processing met GDPR principles of lawfulness, fairness, and transparency for Location Accuracy.
The regulator also found transparency failures across all three features, ruling that Google kept location data in Web & App Activity and Location History for longer than necessary.