Skip to content
Tech News
← Back to articles

Data Protection Commission fines Google €403M over processing of location data

read original get Google Pixel 8 Pro → more articles
Why This Matters

This €403 million fine against Google underscores European regulators' continued aggressive enforcement of GDPR, particularly around how tech giants collect and use sensitive location data. The case highlights ongoing tensions between the utility of location-based services and the privacy risks they pose, sending a signal to other tech companies about transparency and lawful data processing requirements.

Key Takeaways
Worth a Look

Google Pixel 8 Pro — If location privacy is on your mind after this ruling, the Pixel 8 Pro gives you granular Android controls to manage Location History, Web & App Activity, and location accuracy settings directly on-device. It's a great way to take charge of your own data footprint while enjoying a top-tier Google phone experience.

See Google Pixel 8 Pro on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.

The Data Protection Commission (DPC) has today announced its final decision following an Inquiry into Google Ireland Limited (“Google”). This own-volition Inquiry was launched by the DPC, in its role as the Lead Supervisory Authority for Google, in February 2020, following receipt of complaints from several European consumer rights organisations, including BEUC, regarding Google’s processing of location data in connection with certain services and products.

The scope of the Inquiry concerned Google’s processing of location data in three specific features – “Web & App Activity”, “Location History” and “Location Accuracy” between the date of application of the GDPR, 25 May 2018 to 4 February 2020.

The decision, which was made by the Commissioners for Data Protection, Dr Des Hogan, Mr Dale Sunderland and Ms Niamh Sweeney, finds that Google infringed the GDPR in respect of:

the lawfulness and fairness of its processing of location data in Web & App Activity and Location History,

its accountability obligations under the GDPR by failing to be able to demonstrate compliance with the lawfulness, fairness and transparency principle regarding its processing of personal data in Location Accuracy;

its transparency obligations in respect of all three features referred to above; and

its retention of location data in Web & App Activity and Location History.

The DPC has imposed administrative fines totalling €403 million and has ordered Google to bring its processing into compliance within 6 months.

Deputy Commissioner, Graham Doyle commented:

“Location data is a type of personal data which is processed by way of location tracking, and includes data collected or processed by Google, which by itself or in conjunction with other information an individual’s location can be inferred. Location data can bring both benefits and harms to individuals. It can greatly enhance the utility of online services, but it can also reveal a significant amount of information about an individual, including information that is inherently private.

... continue reading