Google Fined €403 Million Over GDPR Violations Tied to Location Data
Summary: Ireland's Data Protection Commission fined Google €403 million for GDPR breaches in how Web & App Activity, Location History and Location Accuracy handled location data between May 2018 and February 2020, finding unlawful and unfair processing, transparency failures, and retention of location data longer than necessary. The order requires Google to bring its processing into compliance within 6 months, the fine is the DPC's fourth-largest, and it becomes payable only after an Irish court confirms it, with Google able to appeal to the High Court within 28 days of formal notice.
What's compelling: Deputy Commissioner Graham Doyle said the failures meant people could have been unaware their location was being used to target them with ads or infer their interests - and the decision arrived more than 6.5 years after the inquiry opened, prompting BEUC's Agustín Reyna to warn that late enforcement can be as harmful as no enforcement at all.
Read the original at The Hacker News ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026