Google - Enforcement
Executive Summary
Ireland's Data Protection Commission fined Google €403 million for GDPR violations related to location data processing between May 2018 and February 2020. The regulator found that Google failed to handle user location data lawfully and transparently, potentially allowing the company to influence users with ads and retain location information longer than necessary without users' awareness or control. Google has been given six months to bring its data processing practices into compliance.
What Happened
Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, for violating the EU's General Data Protection Regulation between May 2018 and February 2020. The regulator found that Google processed user location data unlawfully and unfairly, failing to handle web and app activity, location history, and location accuracy data in a transparent manner. Google has been ordered to bring its data processing practices into compliance within six months.
Who Is Affected
Users across the European Economic Area who had their location data collected by Google during the May 2018 to February 2020 period are affected. These individuals may have been unaware that their location information was being used to influence them with targeted advertisements or to infer their interests, and they retained location data longer than necessary without users' knowledge or control.
Why It Matters
This €403 million penalty represents the fourth largest GDPR fine ever issued by Ireland's Data Protection Commission, demonstrating continued regulatory enforcement against major tech companies' data handling practices. The case establishes that collecting and retaining location data without proper transparency and user control constitutes a serious violation of EU privacy law, potentially setting precedent for how location tracking must be disclosed and managed across the technology industry.
What You Should Do
Review your Google account's location settings by visiting your Google Account settings and examining both Location History and Web & App Activity controls. Consider disabling location tracking features you don't actively use, and regularly review and delete your stored location history through Google's data management tools. Check whether you have received any notifications from Google about changes to location data processing resulting from this enforcement action.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources
- Google faces €403 million GDPR fine over location data - The News International
- Google hit with €403M privacy fine over handling of user location data - politico.eu
- EU hits Google with €403m fine over location data breach - Malay Mail
- EU fines Google 403 million euros over location data privacy breaches - India Today
- Google to report child abuse content directly to Indian authorities - Reuters
- Google hit with €403M privacy fine over handling of user location data - politico.eu
- Google Location Data Leads To €403 Million GDPR Fine - StratNews Global
- The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data
- Google hit with €403M privacy fine over handling of user location data - politico.eu
- Google Location Data Leads To €403 Million GDPR Fine - StratNews Global
- Google hit with €403 million GDPR fine over location tracking - Help Net Security
- Irish regulator hits Google with €403m GDPR fine over invasive location tracking - EUobserver
- Google will pay off its new €403M GDPR fine in just 55 hours, warns Proton - TechRadar