The Irish Data Protection Commission (DPC) has fined Google €403 million for violating the General Data Protection Regulation (GDPR). The investigation, which began in February 2020, focused on the company's handling of user location data.
Regulators examined three specific features active between May 2018 and February 2020: Web & App Activity, Location History, and Location Accuracy. The probe found that Google failed to ensure transparency and legality in processing this information.
The DPC determined that users were not adequately informed about how their location data was used for advertising purposes. Furthermore, the regulator criticized the company for storing location history for excessively long periods, which undermined user control over personal data.
In response, Google stated that these practices have been modified. Since 2019, the company has introduced new data management tools, including an automatic deletion feature. Information in Google Maps Timeline is now stored locally on devices and cleared after three months.
