Google fined R7.5 billion by European Union for data location breach

The Irish Data Protection Commission, representing the European Union, has imposed a substantial fine of 403 million euros (approximately R7.5 billion) on Google for violating users' location data privacy. The infringement occurred between May 2018 and February 2020, according to a statement by the Data Protection Commission (DPC).

Following an investigation launched in February 2020, the DPC concluded that Google had breached the General Data Protection Regulation (GDPR) regarding the lawful and fair processing of location data in web and app activity and location history.

DPC deputy commissioner Graham Doyle explained that due to Google's negligence, individuals might have been unaware that their location data was being utilized to influence them with advertisements or to infer their interests. Doyle further emphasized that the extended retention period of users' location data exacerbated this lack of control.

In addition to the hefty fine, the regulator ordered Google to rectify its data processing practices within a six-month timeframe. Attempts to reach Google for comment were unsuccessful. Google has previously faced significant privacy penalties in Europe, including a €50 million fine by France's CNIL in 2019 for violations of the GDPR concerning transparency and consent for personalized advertising.

The Irish Data Protection Commission has also scrutinized Google's management of personal data, including an ongoing investigation into the company's handling of personal data used in the creation of its PaLM 2 artificial intelligence model, initiated in 2024.