Irish regulator fines Google over location data
Google is fined €403 million and given six months to adjust its data processing.
Ireland’s Data Protection Commission has fined Google €403 million for processing location data. According to the regulator, Google breached European privacy rules on lawfulness, transparency and data retention.
The fine follows an investigation that the Irish regulator began in February 2020 after complaints from European consumer organisations, including BEUC. Within the European Union, Ireland is the main privacy regulator for many large US technology companies because they have based their European operations there.
The investigation examined three Google features: Web & App Activity, Location History and Location Accuracy. The period under investigation ran from 25 May 2018, when the General Data Protection Regulation (GDPR) came into force, to 4 February 2020. The regulator published its final decision on Monday.
According to the Data Protection Commission, Google did not always process location data in Web & App Activity and Location History lawfully and fairly. In the case of Location Accuracy, the company was unable, in the regulator’s view, to demonstrate sufficiently that it had met its obligations. The commission also found that Google did not inform users clearly enough about the processing and retained data for longer than necessary.
According to the regulator, location data can reveal not only where someone is, but also information about visits, activities and movement patterns. The commission warns that users may therefore not have known that their location could be used to influence advertisements or infer interests. This does not mean that every user was tracked in the same way; the decision concerns how Google had configured the features and its information provision.
In addition to the financial sanction, Google must bring its processing into compliance with European rules within six months. The regulator says the full decision will be published later. As a result, the precise legal reasoning, the individual amounts making up the total fine and any further measures have not yet been made public.
According to Reuters, Google had not yet responded to a request for comment shortly after the announcement. The decision concerns historical practices between 2018 and 2020 and does not in itself say that all of Google’s current settings are unlawful. The decision could, however, affect how the company explains location settings, retains data and manages consent.
One story, several perspectives
What is established
- The Irish regulator has fined Google €403 million.
- The decision concerns location processing in three Google features between 2018 and 2020.
- Google must adjust its processing within six months.
- The full decision will be published later.
Left
Arguments A left-wing approach emphasises that location data is highly sensitive information and that users have little negotiating power gegenüber a dominant technology company. High fines and stricter limits on profiling are seen as necessary protection against the concentration of commercial power.
Values Privacy, equality of power, consumer protection and public oversight of large technology companies.
Consequences Without robust enforcement, users may lose control over movement patterns and targeted advertising may penetrate everyday life further. Stricter rules could, on the other hand, make some free digital services more expensive or less personalised.
Centre
Arguments The institutional approach sees the case primarily as a matter of compliance: digital services may use location data if this is explained lawfully, necessarily and clearly. A fine and a remedial deadline should encourage companies to adapt their systems without making innovation impossible.
Values Legal certainty, proportionality, enforceable rules and a workable balance between service provision and privacy.
Consequences Clearer settings and retention periods could increase trust. At the same time, oversight remains necessary to check whether formal consent is genuinely understandable and voluntary.
Right
Arguments A right-oriented approach may emphasise that consumers should retain freedom of choice and useful services, and that regulators should be cautious about imposing large sanctions when companies can improve their systems. The emphasis is on predictable rules and national scope to organise oversight.
Values Entrepreneurship, innovation, property rights and limiting bureaucratic burdens.
Consequences A moderate approach can support technological development and investment. Too little enforcement could, however, create an uneven playing field in which large platforms can more easily pass privacy risks on to users.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The key facts were directly confirmed by the Irish regulator and independently by Reuters. Uncertainties about the full legal reasoning and Google’s response are explicitly limited.
- confirmed Google was fined €403 million by Ireland’s Data Protection Commission. — The amount and decision are set out in the official press release. source
- confirmed The investigation began in February 2020 following complaints from European consumer organisations, including BEUC. — The regulator explicitly names the start date and BEUC. source
- confirmed The investigation concerned Web & App Activity, Location History and Location Accuracy. — These three features are named in the decision. source
- confirmed The period under investigation ran from 25 May 2018 to 4 February 2020. — The official source gives both dates. source
- confirmed Google must adjust its processing within six months. — This is an explicit corrective measure in the decision. source
- confirmed Google had not yet responded to Reuters shortly after the announcement. — Reuters reports that the company did not respond immediately. source
Editor's note
The fine, the features investigated, the period and the deadline for remedial action are set out in the Irish regulator’s decision. The full decision and a substantive response from Google were not yet available at the time of publication.Sources
- Data Protection Commission fines Google €403 million following Inquiry into Google’s processing of location data — Data Protection Commission
- Irish privacy regulator fines Google EUR403 million over location data processing — Reuters via MarketScreener
More on this in Dutch media
- Trouw — „google alphabet”
- NU.nl — „google alphabet”
- De Telegraaf — „google alphabet”