Daijiworld Media Network - Dublin
Dublin, Sep 22: Google has been fined €403 million ($463 million) by Ireland's Data Protection Commission (DPC) for breaching the European Union's strict privacy rules over the handling of users' location data.
The DPC, which serves as Google's lead privacy regulator in the EU because the company's European headquarters is based in Dublin, said an investigation found that Google had failed to lawfully and fairly process location data collected through its Web & App Activity and Location History services.
Web & App Activity allows Google to retain information related to users' browsing and search activity, while Location History records places users have visited with their mobile devices. Regulators also found shortcomings in the way Google processed personal data through its Location Accuracy feature in the Android operating system.
The investigation was launched six years ago and examined Google's processing of location data under the EU's General Data Protection Regulation (GDPR) from the regulation's entry into force in 2018 until February 2020.
The Irish regulator said location data constitutes personal data and can be used to determine or infer an individual's whereabouts. It said such information can provide significant benefits by improving online services but can also expose highly private details about individuals.
DPC Deputy Commissioner Graham Doyle said location data could reveal a significant amount of information about an individual, including information that is inherently private.
Google said the case relates to historical policies that have since been changed.
"From 2019 onwards, we've significantly evolved our practices and launched robust tools that make managing location data simple," the company said in a statement.
The €403 million penalty is the fourth-largest privacy fine imposed by Ireland's DPC. The regulator has previously issued larger penalties against companies including TikTok and Meta, with Meta receiving a €1.2 billion fine in a separate case.
The DPC said three other privacy investigations involving Google remain ongoing.