[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fljb4Hu3TqLxM8DqjcnnwBVzvdTUpARSuJqsPBYm5oXk":3},{"article":4,"iocs":42,"watch_terms":43,"solutions":44,"lesson":52},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":24},"cc54e237-4590-4330-80bb-b8d93afbb6c8","The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data","the-irish-data-protection-commission-fines-google-403-000-000-eur-following-inqu-23eccf","The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data ikerinar Wed, 23\u002F09\u002F2026 - 10:35","The Irish Data Protection Commission (DPC) has fined Google €403 million for violating GDPR rules concerning the processing of user location data. The inquiry, launched in February 2020, focused on Google's 'Web & App Activity', 'Location History', and 'Location Accuracy' features. Google was found to have infringed on GDPR principles regarding lawfulness, fairness, transparency, accountability, and data retention.","Irish DPC fines Google €403M for GDPR violations related to location data processing.","https:\u002F\u002Fwww.edpb.europa.eu\u002Fnews\u002Fthe-irish-data-protection-commission-fines-google-403-000-000-eur-following-inquiry_en",null,"2026-09-23T08:35:10+00:00","2026-09-23T10:00:13.861744+00:00",9,[17],{"name":18,"type":19},"Google","vendor","3f0f8451-91df-4b6c-9a73-ef3b2509b7f1",{"id":20,"icon":12,"name":22,"slug":23},"GDPR","gdpr",[25,27,32,37],{"category":26},{"id":20,"icon":12,"name":22,"slug":23},{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":38},{"id":39,"icon":12,"name":40,"slug":41},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":45,"vendors":46},[],[47],{"slug":48,"name":18,"logo_path":49,"roles":50},"google","\u002Fvendor-logos\u002Fgoogle.png",[51],"affected",{"slug":53,"title":54,"body":55,"framework_refs":56,"framework_notes":67},"google-fined-403m-for-opaque-location-data-practices-violating-gdpr","Google Fined €403M for Opaque Location Data Practices Violating GDPR","Google was found to have unlawfully processed users' location data across multiple features — 'Web & App Activity', 'Location History', and 'Location Accuracy' — without meeting GDPR standards for transparency, lawfulness, and accountability. The core failure was that users were not given clear, honest information about how their location data was collected, retained, and used, making meaningful consent impossible. This matters because organizations cannot rely on burying data practices in complex settings menus or layered disclosures to satisfy legal obligations. A fine of €403 million signals that regulators will hold even the largest tech companies accountable for privacy-by-design failures. This case serves as a critical reminder that data governance must be proactive, user-centric, and auditable — not an afterthought.",[57,58,59,60,61,62,63,64,65,66],"GDPR Article 5 (Principles relating to processing of personal data)","GDPR Article 6 (Lawfulness of processing)","GDPR Article 13 & 14 (Transparency and information obligations)","GDPR Article 25 (Data protection by design and by default)","GDPR Article 5(1)(e) (Storage limitation)","NIST Privacy Framework PR.PO-P1 (Policies and procedures for data processing)","NIST SP 800-53 PT-2 (Authority to Process Personally Identifiable Information)","NIST SP 800-53 PT-5 (Privacy Notice)","CIS Control 3 (Data Protection)","ISO\u002FIEC 27701 (Privacy Information Management)",{}]