Google - Enforcement
Executive Summary
Ireland's Data Protection Commission fined Google €403 million for violating EU privacy rules in how it processed users' location data between 2018 and 2020. The regulator found Google infringed GDPR through three features - Web & App Activity, Location History, and Location Accuracy - and ordered the company to bring its location data practices into compliance within six months. Google states these were historical policies and that it has significantly changed its location data handling sinc...
What Happened
Ireland's Data Protection Commission fined Google €403 million on September 28, 2026, for violating the EU's General Data Protection Regulation in how it processed users' location data between 2018 and 2020. The investigation examined three specific features: Web & App Activity, Location History, and Location Accuracy. The regulator ordered Google to bring its location data processing into compliance within six months.
Who Is Affected
European users who enabled Google's location-related features between 2018 and 2020 are affected by the historical privacy violations. The enforcement action followed complaints filed by multiple European consumer-rights organizations, including BEUC, the European Consumer Organisation. Google users across the EU who had their location data processed through the examined features during this period experienced GDPR violations.
Why It Matters
This €403 million penalty is the fourth-largest fine issued by Ireland's Data Protection Commission under GDPR, contributing to over €4 billion in total penalties against major technology companies. The decision demonstrates continued regulatory enforcement against historical privacy practices even when companies claim to have reformed their policies. Google remains subject to three additional advanced-stage privacy inquiries by the same regulator, indicating ongoing regulatory risk for the company's data handling practices.
What You Should Do
Review your Google account's current location settings by visiting your Google Account privacy controls and disable any location-tracking features you do not actively need. Take advantage of Google's auto-delete features to set rolling deletion schedules for your location and activity data. Consider storing timeline data directly on your device rather than in Google's cloud if you use location services, and regularly audit which apps have access to your location information.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources