The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data
Irish DPC fines Google €403M for GDPR violations related to location data processing.
Summary
The Irish Data Protection Commission (DPC) has fined Google €403 million for violating GDPR rules concerning the processing of user location data. The inquiry, launched in February 2020, focused on Google's 'Web & App Activity', 'Location History', and 'Location Accuracy' features. Google was found to have infringed on GDPR principles regarding lawfulness, fairness, transparency, accountability, and data retention.
Full text
The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data National News 23 September 2026 ie Background informationDate of final decision: 21 September 2026National caseLegal Reference(s): Article 5 (Principles relating to processing of personal data), Article 6 (Lawfulness of processing), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) and Article 13 (Information to be provided where personal data are collected from the data subject)Decision: Administrative fine, compliance orderKey words: GDPR enforcement, technology, accountability, data subjects rightsSummary of the DecisionOrigin of the case The Irish Data Protection Commission (DPC) has announced its final decision following an inquiry into Google Ireland Limited (Google). This own-volition Inquiry was launched by the DPC, in its role as the Lead Supervisory Authority for Google, in February 2020, following receipt of complaints from several European consumer rights organisations, including BEUC, regarding Google’s processing of location data in connection with certain services and products.The scope of the Inquiry concerned Google’s processing of location data in three specific features – “Web & App Activity”, “Location History” and “Location Accuracy” between the date of application of the GDPR, 25 May 2018 to 4 February 2020.Key FindingsThe decision, which was made by the Commissioners for Data Protection, finds that Google infringed the GDPR in respect of:the lawfulness and fairness of its processing of location data in Web & App Activity and Location History;its accountability obligations under the GDPR by failing to be able to demonstrate compliance with the lawfulness, fairness and transparency principle regarding its processing of personal data in Location Accuracy;its transparency obligations in respect of all three features referred to above; andits retention of location data in Web & App Activity and Location History.DecisionThe DPC has imposed administrative fines totalling 403 000 000 EUR and has ordered Google to bring its processing into compliance within 6 months.For further information: Data Protection Commission fines Google €403 million following inquiry into Google’s processing of location data Relevant topics GDPR enforcement Data subject rights Accountability Technology Latest news RSS Feed National News es The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number22 September 2026 EDPB News EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines 21 September 2026 National News fr Failure to respect the rights of individuals: The CNIL fined EXTIA 300 000 EUR11 September 2026All news