Archive · 22 Sep 2026
Ireland Fines Google €403 Million Over Location Data
Ireland’s privacy regulator fined Google €403 million.
The fine concerns how Google handled people’s location information.
The investigation examined practices used from May 2018 to February 2020.
It involved Web & App Activity, Location History and Location Accuracy.
The regulator said Google did not clearly and fairly explain how the data was processed.
Location information can show where people go and may reveal private details about their lives.
Officials said users might not have known their data could be used for advertising or to guess their interests.
Google said its older policies had been changed and that it created tools to make location settings easier to manage.
Google must bring the covered processing into compliance within six months.
Ireland’s Data Protection Commission fined Google €403 million ($462–463 million) for mishandling users’ location data.
The regulator found GDPR problems involving lawfulness, fairness, transparency, accountability and data retention.
The case covered Google’s Web & App Activity, Location History and Location Accuracy features between May 2018 and February 2020.
Officials said users may not have understood that location data could influence advertisements, infer interests or reveal sensitive personal information.
Google said the practices were historical and had been updated, while the regulator ordered compliance changes within six months.
- Who
- Ireland’s Data Protection Commission fined Google after complaints from European consumer organisations.
- What
- Google was fined €403 million for breaching the European Union’s General Data Protection Regulation through its processing and retention of location data.
- When
- The investigated practices ran from May 25, 2018, to February 4, 2020; the decision was announced on a Monday after an inquiry launched in February 2020.
- Where
- The decision was issued by Ireland’s Data Protection Commission, which oversees Google’s European operations because the company’s European headquarters are in Dublin.
- Why
- The regulator found shortcomings in the lawfulness, fairness, transparency and accountability of Google’s location-data processing, including retaining some data longer than necessary.
Regulator and Consumer Groups
Privacy and Transparency
Regulator and Consumer Groups
The Data Protection Commission and consumer groups said Google’s practices did not adequately meet GDPR requirements and could leave users unaware of how their location data was used.
Google said the case concerned historical policies and that it had significantly changed its practices from 2019 onward.
Sensitivity of Location Data
Regulator and Consumer Groups
Officials and the European Consumer Organisation said location data can reveal highly private information, including possible clues about health, religion, political views or sexual orientation.
Google’s response emphasized tools intended to make location-data management simpler; the articles do not report a detailed rebuttal to the regulator’s findings.
Length of Enforcement Process
Regulator and Consumer Groups
The European Consumer Organisation welcomed the decision but said the time taken to reach it was disproportionate to the seriousness of the alleged infringement.
Google’s public response focused on updated policies and tools and did not address the investigation’s duration.
- Fine
- €403 million, reported as approximately $462–463 million and £345 million
- Regulator
- Ireland’s Data Protection Commission (DPC)
- Rules
- European Union General Data Protection Regulation (GDPR)
- Features involved
- Web & App Activity, Location History and Location Accuracy
- Investigation period
- May 25, 2018, to February 4, 2020
- Required action
- Google must bring the relevant processing into GDPR compliance within six months
- Complaints
- European consumer organisations filed complaints beginning in November 2018
- Google’s response
- Google said the case involved historical policies that had since been updated
