Six-Year Investigation Ends in a €403 Million Penalty
Ireland's Data Protection Commission (DPC) has fined Google €403 million (approximately $463M USD) for multiple GDPR violations tied to how the company processed users' location data. The penalty caps an investigation the DPC opened in February 2020 following consumer complaints.
What the DPC Found
The DPC determined Google failed to meet transparency requirements across three location-tracking features:
| Feature | Violation |
|---|---|
| Web & App Activity | Processed browsing and search history without proper disclosure |
| Location History | Tracked user movements without adequate consent mechanisms |
| Location Accuracy | Android positioning feature lacked demonstrable compliance |
The regulator concluded users "could have been unaware that their location was being used to, for example, influence them with ads," and found that Google retained location data for longer than necessary.
Investigation Timeline
| Date | Milestone |
|---|---|
| May 25, 2018 – February 4, 2020 | Period under examination |
| February 2020 | DPC opens formal investigation |
| September 21–22, 2026 | Fine announced — €403M ($462–463M) |
| +6 months | Compliance deadline imposed on Google |
Google's Response
Google says its practices have "evolved substantially" since the period under investigation. The company points to since-implemented changes including:
- Automatic data deletion — Google Maps Timeline now removes location history older than three months by default
- User-friendly management controls for reviewing and deleting stored location data
- Reduced data precision — Google says it no longer stores precise device locations in Web & App Activity, only estimated general areas
Why It Matters
This is one of the larger GDPR enforcement actions against a major tech platform to date, and it underscores continued regulatory scrutiny of how ad-supported platforms handle location data specifically — a category regulators increasingly treat as sensitive given its potential to reveal patterns of life, health status, religious practice, and other protected characteristics.