Google Fined €403M Over Location Data

Google has been fined €403 million ($459 million) by Ireland’s Data Protection Commission (DPC) over violations of European privacy rules involving the processing of users’ location data. The decision follows a six-year investigation covering practices between May 2018 and February 2020.

At the heart of the case is whether users were given sufficient transparency and control over how their location information was collected and used. Regulators found that Google did not adequately explain that location data could help infer user interests and influence advertising.

The controversy emerged after investigations showed that disabling Location History did not necessarily stop all location information from being stored. Another Google setting, Web & App Activity, could continue collecting location-related information even when Location History was switched off.

This distinction raised a fundamental privacy concern: users may believe they have withdrawn permission for location tracking while other services continue processing related information. For privacy regulators, consent must be informed, transparent and sufficiently clear for users to understand what they are accepting or disabling.

Google has faced similar location-privacy disputes in the United States, resulting in settlements and court awards worth billions of dollars across multiple jurisdictions. The cases demonstrate the growing financial and reputational consequences of unclear data-processing practices.

The DPC has ordered Google to bring the relevant location-data processing into compliance within six months. Google maintains that its practices have evolved substantially since the period investigated, including changes that give users greater control over location information and its retention.

The case carries a broader message for the digital economy: privacy compliance is no longer simply about providing an on/off button. Organizations must understand where personal data flows across interconnected applications, clearly communicate its purpose, respect consent choices and maintain auditable governance. As privacy regulations strengthen globally, transparency throughout the entire data lifecycle is becoming fundamental to digital trust.