Google Hit With €403 Million GDPR Fine Over Location Data!

Google has been fined €403 million by Ireland’s Data Protection Commission (DPC) following an investigation into the company’s processing of users’ location data. The inquiry covered the period from May 25, 2018, when the EU’s GDPR came into effect, to February 4, 2020. The DPC found infringements relating to the lawfulness and fairness of processing, transparency and accountability, as well as the retention of location data.

The investigation focused on Google’s Web & App Activity, Location History and Location Accuracy features. According to the DPC, users could have been unaware that their location information was being used in ways that could help infer interests or influence advertising. The regulator also said some location data was retained longer than necessary. Alongside the fine, Google has been ordered to bring the relevant processing practices into compliance with GDPR within six months. Google said the case concerns older policies and that it had made significant changes to location-data controls since 2019, including improved user controls, auto-deletion and less precise location storage.