Ireland’s Data Protection Commission (DPC) has imposed a €403 million fine on Google for mishandling users’ location data between 2018 and 2020. The penalty, equivalent to nearly ₹4,000 crore, follows a six-year investigation under the European Union’s General Data Protection Regulation (GDPR).
The investigation focused on three Google features: Web & App Activity, Location History, and Location Accuracy. Regulators found that Google’s settings were unclear and gave users insufficient control over their location data, violating GDPR rules on lawfulness, fairness, and transparency. The case began after European consumer groups filed complaints in 2020.
Location data can reveal sensitive details about a person’s daily life, including where they live, work, travel, and spend time. The DPC stated that users must receive clear information and simple controls over such data. The inquiry also noted that the wording and design of Google’s settings pages may have made it difficult for users to understand their choices, limiting their control.
Google responded by stating that the case relates to outdated policies and that the company has made significant changes since 2019, including simpler settings, easier data deletion options, and less precise location tracking in some cases. The company has been ordered to bring its practices fully into compliance with GDPR within six months. This fine is the fourth-largest issued by Ireland’s privacy regulator and adds to the growing scrutiny of how major tech companies collect and use location data.
Leave a Reply