EU hits Google with €403m fine over location data breach

Ireland's data protection watchdog, the Data Protection Commission, has imposed a substantial fine of €403 million on tech giant Google for violating the EU's General Data Protection Regulation (GDPR). The infringement occurred between May 2018 and February 2020, according to a statement from the DPC. After launching an inquiry in February 2020, the DPC concluded that Google had breached the GDPR with regards to the lawfulness and fairness of their processing of location data within web and app activities, as well as the retention of users' location history.

DPC deputy commissioner Graham Doyle explained that as a result of Google's failures, individuals might have remained unaware that their location was being utilized to influence them through advertisements or to deduce their interests. Furthermore, Doyle emphasized that the extended retention of users' location data compounded the loss of control.

Alongside the hefty fine, the regulator ordered Google to rectify its processing practices within six months. When contacted by AFP, Google did not provide an immediate response.