The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data
Irish DPC fines Google €403M for GDPR violations related to location data processing.
The Irish Data Protection Commission (DPC) has fined Google €403 million for violating GDPR rules concerning the processing of user location data. The inquiry, launched in February 2020, focused on Google's 'Web & App Activity', 'Location History', and 'Location Accuracy' features. Google was found to have infringed on GDPR principles regarding lawfulness, fairness, transparency, accountability, and data retention.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGoogle was found to have unlawfully processed users' location data across multiple features — 'Web & App Activity', 'Location History', and 'Location Accuracy' — without meeting GDPR standards for transparency, lawfulness, and accountability. The core failure was that users were not given clear, honest information about how their location data was collected, retained, and used, making meaningful consent impossible. This matters because organizations cannot rely on burying data practices in complex settings menus or layered disclosures to satisfy legal obligations. A fine of €403 million signals that regulators will hold even the largest tech companies accountable for privacy-by-design failures. This case serves as a critical reminder that data governance must be proactive, user-centric, and auditable — not an afterthought.
