Google fined $462 million for GDPR violations regarding location data

Ireland's Data Protection Commission (DPC) announced on Monday that it has fined Google €403 million, approximately $462 million, for its processing of location data. The penalty, one of the largest ever imposed by the Irish watchdog, stems from an investigation launched in early 2020 that found the company violated EU privacy regulations, specifically the General Data Protection Regulation (GDPR).

The DPC has also ordered Google to bring its location data processing into compliance within six months. The GDPR mandates that personal data processing must be conducted in a "lawful, fair, and transparent manner." Deputy commissioner Graham Doyle stated that individuals might not have been aware of how their location data was being used, such as for ad targeting or inferring interests, leading to a loss of control over their personal data.

A Google spokesperson indicated that the case concerns historical policies that have since been updated. "From 2019 onwards, we’ve significantly evolved our practices and launched robust tools that make managing location data simple," the spokesperson said. This fine is the latest in a series of regulatory actions against major technology companies globally.

The ruling by the Irish commission was based on Google's processing of location data across three settings: "Web & App Activity," "Location History," and "Location Accuracy." The investigation covered the period between mid-May 2018 and early February 2020. Google has since updated its policies and introduced features allowing users more control over data deletion and personalized advertising.