Ireland's DPC fines Google 403M euros to close 2020 location data inquiry

Ireland's Data Protection Commission issued a 403 million euro EU General Data Protection Regulation fine to Google related to 2020 allegations of unlawful location data processing. The DPC did not immediately publish the final decision in the own-volition inquiry, but it pointed to a handful of GDPR transparency and data processing infringements stemming from location data practices for Google's "Web & App Activity," "Location History" and
"Location Accuracy" features.

According to the DPC, the location data claims in question occurred May 2018 to February 2020. Each feature brought separate violations, with Web & App Activity and Location History practices allegedly breaching lawfulness and fairness principles while Location Accuracy breached "accountability obligations under the GDPR by failing to be able to demonstrate compliance with the lawfulness, fairness and transparency principle."

In a video statement posted on the social platform X, DPC Deputy Commissioner Graham Doyle said complaints from European consumer rights organizations triggered the start of the inquiry.

"Location data can reveal a significant amount of information about an individual, including details about their habits and personality. Information that is inherently sensitive," Doyle said, noting that as a result of Google's alleged failures "individuals may not have been aware their location was being used to, for example, influence them with ads or infer their interests." He added Google's alleged location data retention was "longer than necessary" and "deepened this loss" of user control.

No specific corrective measures were announced beyond a mandate for Google to bring its processing into compliance in the next six months. 

The big fine is the latest in the DPC's enforcement work as the EU supervisory authority for many Big Tech firms, the last action being a 530 million euro fine and corrective measures against TikTok in May 2025. It marks the first major penalty assessed since the DPC's three-commissioner bench was fully established in September 2025.

A Google spokesperson told Reuters the penalty was associated with "historical policies" for the management of location data that were revised at different points since 2019. When the inquiry was opened, a separate company spokesperson also mentioned revised policies to CNBC.

"We will cooperate fully with the office of the Data Protection Commission in its inquiry, and continue to work closely with regulators and consumer associations across Europe. In the last year, we have made a number of product changes to improve the level of user transparency and control over location data," the spokesperson said in 2020.