Google has been fined €403 million by the European Union for violating privacy regulations regarding the handling of users’ location data. This decision was announced by Ireland’s Data Protection Commission on 21 September 2026. The commission determined that Google did not process location data lawfully and fairly across various services and settings.

The investigation began six years ago, delving into how Google complied with the EU’s General Data Protection Regulation (GDPR) from 2018, when the regulation came into force, until February 2020. Ireland serves as Google’s main regulatory authority within the EU, given that the company’s European headquarters is situated in Dublin.

In its findings, the regulatory body stated that Google inadequately handled location data in features such as Web & App Activity and Location History. These elements are designed to track users’ browsing and search history, as well as the places visited using their mobile devices. Additionally, Google’s Location Accuracy feature within the Android operating system was highlighted for failing to meet legal and fair processing standards.

Google’s Response and Changes in Practices

In response to the ruling, Google issued a statement that acknowledged the investigation focused on outdated policies that have since been revised. The company emphasised that significant improvements have been made since 2019, including the introduction of comprehensive tools designed to simplify the management of location data by users.

According to regulatory authorities, location data is categorised as personal data and can provide insights into an individual’s whereabouts. Deputy Commissioner Graham Doyle stated that while location data can enhance the functionality of online services, it also has the potential to disclose sensitive information about users, which raises privacy concerns.

This fine represents the fourth-largest penalty related to privacy breaches imposed by the Irish Data Protection Commission. Previous substantial fines have been levied against companies such as TikTok and Meta, with Meta receiving a notable fine of €1.2 billion. The commission’s enforcement actions highlight ongoing efforts to ensure stringent compliance with privacy regulations across digital platforms.

Ongoing Investigations and Future Implications

The Data Protection Commission noted it is currently conducting three additional investigations related to Google’s handling of personal data. These inquiries further underline the regulatory authority’s commitment to scrutinising compliance with privacy laws in an increasingly digital world.

The case against Google reflects broader trends in the enforcement of data protection regulations within the EU and highlights the importance of accountability for technology companies in managing user data responsibly. The investigation reaffirmed the necessity for companies to maintain transparency and adhere to legal frameworks concerning the processing of sensitive information.

As organisations continue to navigate the complexities of data privacy, the repercussions of this case serve as a cautionary tale for other tech firms regarding the importance of compliance. The EU’s regulatory landscape remains vigilant in addressing privacy violations, thereby ensuring that user data is treated with the respect and security it demands.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store –  https://apps.apple.com/in/app/newspin/id6746449540 

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share