Skip to content

Published · Updated · Ireland

GDPRCritical severityEnforcement action

Irish DPC fines Google Ireland €403 million over unlawful location data processing

Irish DPC fined Google Ireland Ltd EUR 403 million for unlawful location‑data processing covering 25 May 2018‑4 Feb 2020, ordering compliance within six months.

1 source · 1 official · €403M penalty · Irish Data Protection Commission

Illustration

What happened

The Irish Data Protection Commission issued a final decision on 23 September 2026, concluding that Google Ireland Ltd breached the GDPR by processing location data in Web & App Activity, Location History and Location Accuracy between May 2018 and February 2020.

Why it matters

Other tech firms handling EU users' location data face similar scrutiny; they should review consent mechanisms and data minimisation for any location‑based services.

Business impact

Non‑compliant location‑tracking features may need to be disabled or re‑engineered, potentially affecting user experience and advertising revenue.

Drafted automatically from the sources below. How we write summaries

Does this summary seem wrong?

What to check

  1. Review location‑data processingCritical priority

    Audit all location‑based features for lawful basis, consent, and data minimisation and remediate within six months.

Discussion

No comments yet. Start the discussion.

Free account required