Google fined 3 million for violating EU location data regulations.
Google has been penalized with a hefty fine of 403 million euros (approximately 3 million) for violating the European Union’s stringent privacy regulations concerning the management of users’ location data, as announced by the EU’s data privacy authority on Monday.
The investigation, led by Ireland’s Data Protection Commission (DPC), concluded that Google did not process location data in a lawful and fair manner within its Web & App Activity setting, which records users’ search and browsing histories, and in its Location History feature, which tracks users’ physical movements via mobile devices. Additionally, the DPC found that Google failed to ensure fair and transparent processing of personal location data in its Location Accuracy feature within the Android operating system.
As the primary regulator for Google within the EU’s 27-member bloc, Ireland was tasked with examining the company’s compliance with the General Data Protection Regulation (GDPR). The inquiry, initiated six years prior, scrutinized Google’s practices from the GDPR’s implementation in May 2018 through February 2020.
In its defense, Google stated that the case pertains to outdated policies that have since been revised. The company emphasized that significant advancements have been made in its practices post-2019, including the introduction of tools designed to facilitate the management of location data more effectively.
The collection and processing of location data are closely monitored due to their sensitivity. This type of personal information can reveal a significant amount about an individual’s whereabouts and activities, prompting concerns about privacy rights. Graham Doyle, Deputy Commissioner of the DPC, highlighted the dual nature of location data, which can enhance online services but also potentially expose private information about users.
This represents the fourth largest fine issued by the Irish data privacy watchdog, which has previously imposed more substantial penalties on corporations such as TikTok and Meta, including a record fine of 1.2 billion euros against Meta for related infractions. Moreover, the DPC has indicated that it is currently engaged in three additional privacy investigations concerning Google, signaling ongoing scrutiny of the tech giant’s data handling practices.
In a rapidly evolving digital landscape, the repercussions of the DPC’s findings may serve as a cautionary tale for other technology firms regarding compliance with data privacy regulations in Europe.
