Google Pays €403M Fine for Location Data Handling

Google has received a €403 million fine from Ireland's Data Protection Commission for violating the EU's General Data Protection Regulation. The penalty stems from how the tech giant managed user location data across three specific features between May 2018 and February 2020.

The regulator determined that Google failed to process this data lawfully and transparently. Additionally, the company retained location information longer than necessary, a practice that regulators argue undermines user control over their personal digital footprint.

Regulators cite transparency failures

The fine targets Web & App Activity, Location History, and Location Accuracy. For the first two, the commission found that users were not adequately informed about how their movement data was used. This lack of clarity meant people could not make fully informed decisions about their privacy settings.

In the case of Location Accuracy, an Android feature that improves positioning precision, Google could not prove that its processing was fair. The regulator noted that without clear accountability, users remained unaware that their precise locations were being analyzed to infer interests or target advertisements.

Fine requires court confirmation

Although the €403 million figure is substantial, the money is not immediately payable. Under Irish law, the fine only becomes enforceable after the High Court confirms the decision. Google has 28 days from receiving formal notice to appeal the ruling, a process that could delay payment for several years.

The company has stated that it has already updated its policies since 2019. These changes include auto-delete controls for location data, which are now default for many users. However, the DPC has not yet confirmed whether these recent adjustments fully satisfy the new compliance order.

Critics highlight enforcement delays

The decision arrived more than six and a half years after the inquiry began in 2020. The investigation was triggered by complaints from European consumer groups, including BEUC, who argued that Google's data practices infringed on user rights. The long gap between complaint and penalty drew criticism from advocates.

BEUC director general Agustín Reyna welcomed the fine but warned that slow enforcement undermines trust in data protection laws. According to The Hacker News and other reports, the organization believes that delays can be as damaging as a lack of enforcement entirely, potentially eroding confidence in regulatory bodies.