Google fined $463 million for breaching EU rule on location data

The Irish Data Protection Commission has imposed a substantial fine of 403 million euros ($463 million) on Google for violating strict European Union privacy regulations. The investigation, which began six years ago, focused on how the tech giant handled user location data within its various services. Ireland's Data Protection Commission, the lead regulator for Google in the 27-nation EU, found that Google mishandled location data in Web & App Activity, a setting that tracks browsing and search history, as well as Location History, a service that maps places users have visited using their mobile devices.

Additionally, Google failed to process personal data lawfully, fairly, and transparently in its Location Accuracy feature within the Android mobile operating system. The investigation, which examined Google's compliance with the EU's General Data Protection Regulation (GDPR) since its implementation in 2018, specifically looked at historical policies that have been updated since 2019.

Google acknowledged the fine, stating that they have since revised their practices and introduced robust tools to simplify managing location data. Deputy Commissioner Graham Doyle emphasized that location data, while beneficial for online services, can also expose sensitive private information about individuals. This marks the fourth-largest privacy fine issued by the Irish watchdog, who has previously imposed larger penalties on companies like TikTok and Meta, including a 1.2 billion euro fine for Meta. The Irish watchdog has also launched three other ongoing privacy investigations involving Google.