Ireland's Data Protection Commission (DPC) fined Google €403 million for violating GDPR rules. The inquiry focused on the company's processing of user location data between May 2018 and February 2020. This investigation launched in 2020 following multiple complaints from consumer groups.
The DPC found Google lacked transparency and a valid legal basis for its data handling. Users remained unaware that their location data targeted advertisements or helped infer personal interests. These failures resulted in a significant loss of control for users over their personal information.
Google must bring its data processing into compliance within six months. A company spokesperson stated the case centers on historical policies that have since been updated. Google claims its practices have significantly evolved since 2019.