The European Union’s privacy watchdog has fined Google for violating strict data privacy rules, citing improper handling of users’ location data.
| PULSE POINTS |
❓ WHAT HAPPENED: Google has been fined €403 million ($463 million) by Ireland’s Data Protection Commission (DPC) for violating strict European Union (EU) privacy rules through its handling of users’ location data between 2018 and February 2020. The regulator found that Google’s Web & App Activity, Location History, and Location Accuracy features failed to meet the EU’s General Data Protection Regulation (GDPR) requirements for lawful, fair, and transparent processing, while some location data was retained longer than necessary. 📺 DETAIL: Ireland serves as Google’s lead EU privacy regulator because the company’s European headquarters is located in Dublin. The six-year investigation began after complaints from European consumer organizations. Google said the case concerns historical practices that have since been changed, arguing that it has introduced stronger tools for users to manage their location data. The DPC has also ordered Google to bring its data-processing practices into compliance within six months, while three other large-scale investigations involving the company remain ongoing. The penalty adds to a growing record of major EU actions against Big Tech, including the European Commission’s €797.72 million ($841 million at the time) fine against Meta in 2024 over allegedly anti-competitive practices involving Facebook Marketplace, which Meta said it would contest. 🎯 IMPACT: The fine adds to growing European regulatory pressure on major U.S. technology companies, with Google now facing another substantial financial penalty over how it handled user data. The case could increase pressure on Big Tech firms to tighten privacy practices across Europe, while raising questions about whether the EU’s regulatory approach will lead to higher compliance costs and more disputes with American technology companies. 💬 KEY QUOTE: “Location data can bring both benefits and harms to individuals… but it can also reveal a significant amount of information about an individual, including information that is inherently private.” – Deputy Commissioner Graham Doyle 📺 FLASHBACK: The GDPR, implemented in May 2018, was designed to strengthen data protection and privacy for individuals in the EU. Google has faced multiple fines under this regulation. However, the Trump administration is pushing back against a range of EU tech regulations, chiefly the Digital Services Tax, as a de facto shakedown of the U.S. tech sector, since its market dominance means it is disproportionately affected by taxes, fines, and levies. |
Join Pulse+ to comment below, and receive exclusive e-mail analyses.