Google has been slapped with a 403-million-euro fine, equivalent to around USD 463 million, by Ireland’s Data Protection Commission (DPC) over its handling of users’ location information.
The regulator said Google failed to meet European Union privacy requirements while processing location-related personal data through several of its services and Android features.
The investigation focused on Google’s practices between the introduction of the EU’s General Data Protection Regulation (GDPR) in 2018 and February 2020.
Why Did The EU Fine Google?
The investigation examined the way Google processed location information through services including Web & App Activity and Location History.
Web & App Activity can store information related to users’ searches and browsing activity, while Location History is designed to record places visited by users carrying mobile devices.
Ireland’s DPC said Google did not process the information in a way that was sufficiently lawful and fair under EU privacy requirements. The regulator also raised concerns about transparency in the processing of location information.
Google’s Location Accuracy feature on Android was also covered by the investigation.
What Did Ireland’s Privacy Regulator Say?
According to the DPC, location information is particularly sensitive because it can potentially reveal where an individual has been and provide insights into aspects of their private life.
Deputy Commissioner Graham Doyle said location data can make digital services more useful but can also expose considerable information about individuals.
Ireland is responsible for leading the EU’s privacy regulation of Google because the technology company has its European headquarters in Dublin.
Google Responds To $463 Million Privacy Penalty
Google said the penalty relates to policies and practices from the past.
The company said it had made significant changes to the way location information is handled from 2019 onwards and introduced additional tools aimed at giving users greater control over their location data.
The company’s response comes after an investigation that remained open for around six years before the regulator announced its decision.
Google Faces More EU Privacy Investigations
The latest penalty is among the largest privacy fines imposed by Ireland’s DPC. The regulator has previously issued even bigger penalties against major technology companies, including Meta and TikTok.
The DPC said its scrutiny of Google is not over, with three other privacy investigations involving the company still underway.
The latest decision adds to the wider regulatory focus on how major technology companies collect, process and use personal information, particularly data that can reveal a user’s movements and location.
