Last Update: 09/28/2026 at 11:33 PM EST

Google Fined €403M Over Location Data

Coverage from BleepingComputer, New York Post, and others

Google Fined €403M Over Location Data topic image

Ireland’s Data Protection Commission fined Google €403 million over location-data processing under the GDPR, covering services including Web & App Activity, Location History, and Location Accuracy from 2018 to February 2020.

The regulator found shortcomings in transparency and compliance, including concerns about users’ understanding of how their location data could be used and, for some services, how long it was retained. Google says its practices and user controls have since changed, and the regulator ordered corrective action within six months.

Key Articles1 of 4 articles

If you read one thing

It clearly summarizes the €403 million fine, the GDPR findings, the corrective order, and Google’s response, with validated figures.

BleepingComputer / Bill Toulas
Key Issues

Major GDPR enforcement over location-data practices

Ireland’s DPC imposed a €403 million fine on Google over location-data processing that it found insufficiently transparent and compliant, with a six-month deadline for corrective action. Google says it has since updated location controls and practices.

Drawn from 4 articles

Key Numbers

€403 million euros

administrative fines

total imposed by the DPC

“The DPC imposed administrative fines totaling €403 million and ordered Google to bring its data processing into compliance within six months.”

BleepingComputer

six months

compliance deadline

time allowed for Google to achieve compliance

“The DPC imposed administrative fines totaling €403 million and ordered Google to bring its data processing into compliance within six months.”

BleepingComputer

three months

maximum age of Google Maps Timeline data before automatic deletion

under Google’s current device-based storage approach

“Google Maps Timeline information is now stored on the device and automatically deletes data older than three months.”

BleepingComputer

Looking Back
6 Day Timeline
Sep 21Sep 22Sep 23Sep 24Sep 25Sep 26
The Story So Far
No material change

No new articles were added, so there is no material change to report.

Previously

Ireland’s Data Protection Commission fined Google €403 million over location-data processing under the GDPR, covering services including Web & App Activity, Location History, and Location Accuracy from 2018 to February 2020. The regulator found shortcomings in transparency and compliance, including concerns about users’ understanding of how their location data could be used and, for some services, how long it was retained. Google says its practices and user controls have since changed, and the regulator ordered corrective action within six months.

All Articles4 articles
Interesting4 articles · CI Score 45–59
BleepingComputer / Bill Toulas
Ireland's Data Protection Commission fined Google 403 million euros after investigating location-data processing under GDPR rules applied from May 2018 through February 2020.
9/21/2026 • Regulation, Law & Enforcement • General
New York Post
Ireland's Data Protection Commission fined Google $463 million in Dublin after finding unlawful and nontransparent processing of users' location data under EU privacy law.
9/21/2026 • Regulation, Law & Enforcement • General
Yahoo Finance
Ireland's Data Protection Commission fined Google 403 million euros in Dublin on Monday for unlawful and insufficiently transparent processing of users' location data under the GDPR.
9/21/2026 • Regulation, Law & Enforcement • General
FileHippo News
Ireland's Data Protection Commission fined Google EUR 403 million over GDPR violations in its processing of web, app, and location data from 2018 to 2020, following an inquiry into complaints filed in 2020.
9/26/2026 • Regulation, Law & Enforcement • General