Google Fined $463 Million for Breaching EU Location Data Rules
The European Union’s data protection watchdog has handed Google a hefty fine of 403 million euros ($463 million) for violating strict location data rules. The Irish regulator, which oversees Google’s European operations, concluded that the tech giant mishandled users’ location data in several settings, including Web & App Activity and Location History.
At the heart of this controversy is the way Google processes personal data, specifically location information collected from users’ mobile devices. This type of data can reveal a significant amount about an individual’s habits and movements, making it sensitive and regulated by EU rules. The regulator found that Google failed to be transparent about its collection and use of location data, breaching the General Data Protection Regulation (GDPR) since 2018.
The investigation, which began six years ago, examined Google’s practices from 2018 until February 2020. Regulators discovered that Google did not lawfully or fairly process location data in several areas, including its Location Accuracy feature on Android devices. This feature was designed to improve the accuracy of location tracking but ultimately exposed users’ sensitive information without proper consent.
Google has since updated its policies and introduced new tools for managing location data, claiming these changes were made after 2019. However, regulators argue that these updates do not excuse the company’s previous actions and are insufficient to mitigate the harm caused by the breaches.
This fine is a significant blow to Google, marking one of the largest penalties issued under EU privacy rules. The regulator has previously handed out fines exceeding $1 billion to companies like Meta. Furthermore, this ruling highlights the ongoing scrutiny of tech giants regarding their handling of sensitive user data and their compliance with regulatory requirements.
For users, this case underscores the importance of being mindful of location tracking settings on devices and online platforms. It is crucial to understand how location data can be used by companies and to take steps to protect personal information. This includes regularly reviewing and adjusting privacy settings, opting out of location services when possible, and using tools that help manage data collection.
Ultimately, this fine serves as a reminder for tech companies to prioritize user data protection and transparency in their practices. As the regulatory landscape continues to evolve, it is essential for companies like Google to adapt and ensure compliance with EU rules to avoid further penalties and reputational damage.
Source: SecurityWeek — 2026-09-21