Google Fined €403M Over Location Data
Coverage from BleepingComputer, New York Post, and others

Ireland’s Data Protection Commission fined Google €403 million over location-data processing under the GDPR, covering services including Web & App Activity, Location History, and Location Accuracy from 2018 to February 2020.
The regulator found shortcomings in transparency and compliance, including concerns about users’ understanding of how their location data could be used and, for some services, how long it was retained. Google says its practices and user controls have since changed, and the regulator ordered corrective action within six months.
If you read one thing
It clearly summarizes the €403 million fine, the GDPR findings, the corrective order, and Google’s response, with validated figures.
Major GDPR enforcement over location-data practices
Ireland’s DPC imposed a €403 million fine on Google over location-data processing that it found insufficiently transparent and compliant, with a six-month deadline for corrective action. Google says it has since updated location controls and practices.
€403 million euros
administrative fines
“The DPC imposed administrative fines totaling €403 million and ordered Google to bring its data processing into compliance within six months.”
six months
compliance deadline
“The DPC imposed administrative fines totaling €403 million and ordered Google to bring its data processing into compliance within six months.”
three months
maximum age of Google Maps Timeline data before automatic deletion
“Google Maps Timeline information is now stored on the device and automatically deletes data older than three months.”
No new articles were added, so there is no material change to report.
Previously
Ireland’s Data Protection Commission fined Google €403 million over location-data processing under the GDPR, covering services including Web & App Activity, Location History, and Location Accuracy from 2018 to February 2020. The regulator found shortcomings in transparency and compliance, including concerns about users’ understanding of how their location data could be used and, for some services, how long it was retained. Google says its practices and user controls have since changed, and the regulator ordered corrective action within six months.
