Google Faces €403 Million Location Fine

Google has been hit with a €403 million fine in Ireland over the way it processed users’ location data, placing fresh attention on one of the most sensitive areas of digital privacy.

Ireland’s Data Protection Commission found that Google breached European privacy rules through features including Web & App Activity, Location History and Location Accuracy. The investigation examined practices between 2018 and 2020, focusing on whether users were properly informed about how their movements were being recorded and used.

Location information carries particular weight because it can reveal far more than a person’s physical whereabouts. Patterns of movement can point to routines, interests and behaviour, making the data commercially valuable while raising difficult questions around consent and control.

Google argues that the case relates to older practices that have since been changed. The company has introduced automatic deletion tools, shifted some timeline information onto users’ devices and expanded controls over how location data is stored and used. In some cases, it has also reduced reliance on precise location signals.

Those changes did not prevent the regulator from imposing one of its largest penalties to date. Google has been ordered to bring the relevant processing fully into compliance within six months.

The case shows how Europe’s privacy regime is moving beyond broad questions of whether data is collected at all. Regulators are increasingly testing whether users genuinely understand what they are agreeing to, whether controls are easy to exercise and whether companies can justify the way sensitive information is handled.

For Google, the financial penalty is substantial, but the more lasting pressure may come from having to redesign data practices around stricter expectations of transparency and user control.