Google Fined €400 Million Over EU Location Data Breach

Google has been fined €400.3 million (approximately $460.3 million) by Ireland’s Data Protection Commission (DPC) for violating the European Union’s strict General Data Protection Regulation (GDPR) rules concerning the collection of users’ location data.

As Google’s European headquarters are located in Dublin, the DPC conducted the investigation on behalf of the EU. In addition to the fine, Google has been given a final deadline of six months to bring its location-data processing practices fully into compliance with the European GDPR framework.

Findings and Regulatory Observations

The lengthy investigation, launched in 2020 following complaints from several consumer-protection organisations, examined three specific Google features covering the period from May 2018 to February 2020. These were Web & App Activity, Location History and Android’s Location Accuracy.

According to the DPC’s findings, Google failed to maintain sufficient transparency about how users’ location information was being used. In particular, the regulator found that retaining the data for longer than necessary for purposes such as advertising and assessing users’ interests, without adequate consent, violated GDPR principles. The fine ranks as the fourth-largest penalty imposed by the DPC since the GDPR came into effect.

Google’s Response and Wider Context

Responding to the ruling, Google said the legal issues in question relate to its older policies, which have since been revised. The company said it had made significant changes to its data-protection practices since 2019 and had given users greater control over their information, including features that automatically delete data.

This is not Google’s first legal challenge in the European market. The technology giant previously faced a $4.7 billion antitrust case in 2018 and a $1 billion fine over allegations that it gave preferential treatment to its own services in search results.

//DBTech/BMT/OR//