Ireland fines Google €403m for GDPR breaches over location data handling

Ireland’s Data Protection Commission fined Google €403 million for GDPR breaches linked to how it processed users’ location data in three features (Web & App Activity, Location History, Location Accuracy) from May 2018 to February 2020. The inquiry found the processing was not lawful, fair, or transparent, potentially allowing ads targeting and profiling without users’ clear awareness, and Google must bring its processing into compliance within six months. Google says policies have since evolved, including auto-delete controls and enhanced transparency.