Ireland Fines Google €403 Million for GDPR Location-Data Violations

Ireland’s Data Protection Commission (DPC) has imposed a €403 million ($463 million) fine on Google for GDPR violations in its processing and retention of users’ location data. The investigation examined the company’s Web & App Activity, Location History, and Android Location Accuracy features between May 25, 2018, and February 4, 2020, finding shortcomings involving lawfulness, fairness, transparency, accountability, and retention practices.

The DPC ordered Google to make its location-data processing compliant within six months. Google said the ruling concerns historical practices that it has since changed, citing stronger user controls, automatic deletion settings, and device-based storage of Google Maps Timeline data.