Ireland Fines Google €403 Million Over Location Data

Ireland’s Data Protection Commission fined Google €403 million for violating the EU’s General Data Protection Regulation in its handling of location data. The regulator found shortcomings in the lawfulness, fairness and transparency of Google’s “Web & App Activity,” “Location History” and “Location Accuracy” features, including insufficient disclosure that location information could be used to tailor advertising or infer users’ interests. It also said some data was retained longer than necessary, limiting users’ control over sensitive personal information. The DPC ordered Google to bring its practices into compliance within six months. Google said the case concerned historical policies and that it had significantly improved its location-data controls since 2019.