Ireland DPC Fines Google €403 Million Over Location Data Privacy Violations - News Directory 3

Ireland DPC Fines Google €403 Million Over Location Data Privacy Violations

September 22, 2026 Lisa Park Tech
News Context
At a glance
  • Location data is a type of personal data which is processed by way of location tracking, and includes data collected or processed by Google, which by itself or...
Original source: ghacks.net
Ireland’s Data Protection Commission has fined Google €403 million for violations of the General Data Protection Regulation concerning the processing of users’ location data. According to the regulatory body, the inquiry found that the tech giant infringed European privacy laws by failing to meet transparency obligations, processing data unlawfully across three core features, and retaining information longer than necessary.

Investigation Scope and GDPR Findings

The investigation was initiated in February 2020 by the Data Protection Commission following complaints from several European consumer rights organizations. The inquiry examined Google’s processing practices between May 25, 2018, and February 4, 2020. Three specific features came under scrutiny: Web & App Activity, Location History, and Location Accuracy. According to the Data Protection Commission, Google processed location data through Web & App Activity and Location History in a manner that violated GDPR standards of lawfulness and fairness. Furthermore, the regulatory authority concluded that the company could not demonstrate compliance with data protection principles regarding Location Accuracy, an Android feature that enhances positioning beyond standard GPS.

Impact on User Control and Privacy

Deputy Commissioner Graham Doyle explained that users may have been unaware their location was tracked to infer personal interests or deliver targeted advertisements.

Location data is a type of personal data which is processed by way of location tracking, and includes data collected or processed by Google, which by itself or in conjunction with other information an individual’s location can be inferred. Location data can bring both benefits and harms to individuals.

The DPC said its investigation, which began in 2020, found that Google infringed the GDPR by processing users' location data
Photo: irishtimes.com
Data Protection Commission Doyle noted that keeping this information longer than necessary worsened a user’s loss of control over sensitive personal details.

Google Response and Compliance Timeline

Ireland DPC Fines Google €403 Million Over Location Data Privacy Violations
Photo: dataprotection.ie
In response to the ruling, a Google spokesperson stated that the regulatory findings concern historical policies that have since been modified. According to the company, significant changes were introduced starting in 2019, including tools that simplify the management of location data and allow automatic deletion after a set period. Google now stores Google Maps Timeline data directly on user devices and deletes information older than three months automatically. The Data Protection Commission has given Google six months to bring its data processing operations into full compliance with the regulatory requirements. While the full decision has not yet been published by the authority, the penalty stands as the fourth largest issued by the Irish watchdog since the GDPR took effect, following prior enforcement actions against Meta, TikTok, and Instagram.
Google’s €403 Million Location Data Fine Explained

Related reading