Published · Updated · Ireland
GDPRCritical severityEnforcement action
Irish DPC fines Google Ireland €403 million over unlawful location data processing
Irish DPC fined Google Ireland Ltd EUR 403 million for unlawful location‑data processing covering 25 May 2018‑4 Feb 2020, ordering compliance within six months.
1 source · 1 official · €403M penalty · Irish Data Protection Commission

What happened
The Irish Data Protection Commission issued a final decision on 23 September 2026, concluding that Google Ireland Ltd breached the GDPR by processing location data in Web & App Activity, Location History and Location Accuracy between May 2018 and February 2020.
Why it matters
Other tech firms handling EU users' location data face similar scrutiny; they should review consent mechanisms and data minimisation for any location‑based services.
Business impact
Non‑compliant location‑tracking features may need to be disabled or re‑engineered, potentially affecting user experience and advertising revenue.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
Review location‑data processingCritical priority
Audit all location‑based features for lawful basis, consent, and data minimisation and remediate within six months.
Discussion
No comments yet. Start the discussion.