Google Fined €403 Million for Location Data Misuse

Google has been fined €403 million (£345 million) by Ireland’s Data Protection Commission (DPC) for mishandling users’ location data.

A BBC report said this fine came after an investigation that started six years ago. This investigation followed complaints from several European consumer rights groups.

The DPC announced on Monday that its findings revealed Google had processed location data in ways that were not lawful, fair, or transparent.

The investigation looked at Google’s handling of location data through three features: Web & App Activity, Location History, and Location Accuracy from 25 May 2018 to 4 February 2020.

The DPC pointed out that location data can expose important details about individuals, including private information.

Graham Doyle, DPC Deputy Commissioner, stated that the General Data Protection Regulation (GDPR) requires personal data to be handled lawfully, fairly, and transparently.

He mentioned that Google’s actions broke the GDPR rules, which started on 25 May 2018. This regulation set strict data privacy and security rules across the European Economic Area.

According to Mr Doyle, Google’s mistakes might have left users unaware that their location data was used for things like targeting ads or guessing their interests.

He also noted that keeping users’ location data longer than needed could take away their control over their personal information.

The DPC has also told Google to fix its data handling practices to comply with the GDPR within six months.

In response to the ruling, Google said this case was about old policies that have already been changed.

“From 2019 onwards, we’ve significantly changed our practices and launched easy tools that make managing location data simple,” the tech giant said.

Google said it has added several data protection measures. These include automatic deletion controls that let users set their accounts to delete data every three, 18, or 36 months.

The company also mentioned simplified advertising controls, which let users turn off personalized ads. They also improved transparency about their location data practices and account settings.