Google Fined 403 Million Euros Over Location Data Privacy Violations

Google has been fined €403 million by Ireland’s Data Protection Commission (DPC) over violations linked to the company’s handling of users’ location data, following an investigation into its privacy practices. The DPC said the investigation examined Google’s processing of location information through three services — Web & App Activity, Location History and Location Accuracy. The inquiry covered the period from May 2018 to February 2020 and was launched after complaints from European consumer organisations.

According to the regulator, Google did not fully meet requirements under the European Union’s General Data Protection Regulation (GDPR) concerning the lawful and fair processing of location data. The DPC also found shortcomings related to transparency and accountability, saying Google had not adequately demonstrated compliance with certain GDPR requirements concerning its Location Accuracy service.

The regulator said location information can reveal sensitive details about individuals, including places they regularly visit, where they live or work, and their patterns of movement. It therefore requires companies handling such information to provide users with clear information about how their data is processed.

Alongside the financial penalty, the DPC has ordered Google to bring the relevant processing activities into compliance with GDPR requirements within six months. The investigation was led by Ireland’s DPC because Google’s European headquarters are based in Ireland. The regulator said the case represents its fourth-largest fine.

Google has pointed to changes it made to its location-data practices after the period examined by the investigation. The company has said it introduced additional tools and controls to give users greater control over their location information. The €403 million penalty relates to practices examined during the 2018-2020 period and does not by itself establish that the same practices continue unchanged today.

The case adds to regulatory scrutiny of how major technology companies collect, use and retain personal information. It also highlights the importance of transparency when location data is used across online services and mobile devices. The development serves as a reminder to review location and privacy settings associated with their Google accounts and smartphones and to check which services are permitted to access or retain location information.

Disclaimer: This image is taken from NDTV.