The Irish Data Protection Commission has imposed a fine of €403 million, equivalent to approximately $462 million, on Google LLC. The penalty follows an investigation into the company's methods for collecting user location data, which regulators determined violated the General Data Protection Regulation.
The investigation, which began in 2020, examined data collection practices occurring between May 25, 2018, and February 4, 2020. Regulators concluded that Google breached the GDPR principles of lawfulness, fairness, and transparency regarding the disclosure of personal data collection and retention policies.
The regulatory scrutiny focused on three specific features: Web & App Activity, Timeline, and Google Location Accuracy. These tools utilize GPS, cellular signals, and Wi-Fi network data to track device locations for purposes including search personalization and advertising.
In addition to the financial penalty, the Irish regulator has mandated that Google must align its data collection practices with GDPR requirements within a six-month period. Google stated that the case concerns historical policies that have been updated since 2019.
