Verstoß gegen Datenschutz: Ärger um Standortdaten: Google muss 400 Millionen zahlen

Google, the major US tech company, faces a fine of over 400 million euros for violating the European General Data Protection Regulation (GDPR), according to the Irish Data Protection Commission (DPC). The infringement concerns the handling of location data from users between 2018 and 2020. The complaint specifically targets the processing of location data in web and app activities, location history, and location accuracy.

It is alleged that users might not have been aware that their location data was used to influence advertising or draw conclusions about their interests, and that they lost control over their personal data, according to Graham Doyle, deputy head of the authority. The fact that the location data was stored for longer than necessary exacerbated this loss of control. Consumer protection advocates had lodged complaints.

A Google spokesperson stated that the issue relates to previous practices that have since been updated. "Since 2019, we have significantly improved our procedures and introduced robust tools for managing location data," the spokesperson added. As of 2019, Google now deletes location data automatically at intervals of 3, 18, or 36 months, and personalization of advertising can be completely switched off.

The location data is now stored directly on the device. Personalized advertising can be entirely disabled. The location is now only stored roughly and all information about location handling and account settings are now consolidated in a central location. Google is headquartered in Dublin, Ireland, so Irish data protectors are responsible.

The investigation was initiated in 2020 following complaints from several European consumer protection organizations.