started · updated
Google fined €403 million by Irish regulator for GDPR location data breaches FAST-MOVING
Ireland’s Data Protection Commission (DPC) has fined Google €403 million following a six-year investigation into the company’s handling of user location data. The probe, which began in February 2020 following complaints from European consumer groups including BEUC, found that Google breached the General Data Protection Regulation (GDPR) between May 2018 and February 2020.
The investigation focused on three specific features: ‘Web & App Activity’, ‘Location History’, and ‘Location Accuracy’. The DPC concluded that Google failed to process data lawfully and fairly through its Web & App Activity and Location History settings, and failed to demonstrate compliance with transparency and lawfulness principles regarding Location Accuracy. Additionally, the regulator found that Google retained location data for longer than necessary, which Deputy Commissioner Graham Doyle stated ‘aggravated this loss of control’ for users.
As a result of these findings, Google has been ordered to bring its data processing practices into compliance with GDPR within six months. Google responded by stating that the case concerns historical policies that have since been updated, noting that since 2019, the company has implemented new tools to simplify location data management.
Entities
Alphabet · Data Protection Commission · European Union · Google · Graham Doyle · Ireland
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 18 SOURCES] Google processed user location data in an unlawful and non-transparent manner. trn.mk · mobilsiden.dk · pt.euronews.com · www.independent.co.uk · bilbaohiria.com · +12 more
- [● 18 SOURCES] The Irish Data Protection Commission fined Google 403 million euros. trn.mk · mobilsiden.dk · pt.euronews.com · www.independent.co.uk · bilbaohiria.com · +12 more
- [● 18 SOURCES] Google must bring its data processing into compliance with GDPR within six months. mobilsiden.dk · pt.euronews.com · www.independent.co.uk · bilbaohiria.com · trn.mk · +12 more
- [● 5 SOURCES] This is the fourth largest fine issued by the Irish DPC under GDPR rules. mobilsiden.dk · www.independent.co.uk · bilbaohiria.com · stratnewsglobal.com · www.standard.co.uk
- [● 10 SOURCES] The investigation focused on Web & App Activity, Location History, and Location Accuracy features. pt.euronews.com · www.independent.co.uk · bilbaohiria.com · www.kurierverlag.de · www.leinetal24.de · +4 more