Google Fined €403 Million By EU Privacy Regulator Over Location Data Handling Violations

The European Union's privacy regulator, Ireland's Data Protection Commission, has fined Google €403 million for alleged violations related to handling users' location data. The investigation focused on Google's Web & App Activity and Location History services, which collect data on users' searches, browsing patterns, and places visited through mobile devices. Concerns were also raised regarding Google's Location Accuracy feature in the Android operating system.

The regulator, acting as the lead privacy authority for Google in the EU, examined the company's practices under the General Data Protection Regulation (GDPR) from 2018 to February 2020. The case primarily revolves around historical policies that have since been updated. Google stated that from 2019 onwards, they have significantly improved their practices and introduced robust tools for managing location data.

Location information is considered sensitive personal data by the regulator, as it can provide insights into an individual's movements and private activities. Deputy Commissioner Graham Doyle highlighted that while location data can enhance the utility of online services, it also carries risks and can reveal significant private information about individuals. The fine is among the largest issued by Ireland's privacy watchdog and marks the fourth-largest penalty in the country.

Ireland's DPC has ongoing investigations into three other privacy-related matters involving Google, indicating that regulatory scrutiny of the company's data practices remains active.