EU fines Google €403mil for location data breach

The Irish Data Protection Commission has fined Google €403 million for improperly using users' location data, eight years after consumer groups raised concerns. This is the fourth largest fine imposed by the Data Protection Commission. The commission is overseeing Google at the European level as the company's European headquarters are in Ireland.

Between May 2018 and February 2020, Google breached the EU's General Data Protection Regulation by collecting location data lawfully and fairly, according to the commission. The DPC deputy commissioner stated that individuals may have been unaware their location was being used for targeted ads or to infer their interests. The regulator ordered Google to comply with the EU's GDPR within six months.

In response, Google acknowledged historical policy updates and mentioned launching robust tools for managing location data. The fine comes after coordinated complaints from European consumer organizations, with the BEUC praising the decision as an important step in holding Google accountable. However, they criticized the delay in enforcement, emphasizing the urgency of upholding consumers' fundamental rights.