EU hits Google with €403m fine over location data breach

The technology giant infringed the EU’s General Data Protection Regulation on the matter between May 2018 and February 2020, Ireland’s Data Protection Commission (DPC), which is charged with applying the bloc’s rules over the issue, said in a statement. — AFP pic

First Published: Monday, 21 Sep 2026 6:45 PM MYT

DUBLIN, Sept 21 — Ireland’s data protection watchdog, acting on behalf of the European Union, said Monday that it had fined Google €403 million (RM1.89 billion) for breaching users’ location data.

The technology giant infringed the EU’s General Data Protection Regulation on the matter between May 2018 and February 2020, Ireland’s Data Protection Commission (DPC), which is charged with applying the bloc’s rules over the issue, said in a statement.

In its final decision after launching an inquiry in February 2020, the DPC ruled that Google infringed the GDPR “in respect of the lawfulness and fairness of its processing of location data in web and app activity and location history”.

DPC deputy commissioner Graham Doyle said that “as a result of Google’s failures... individuals could have been unaware that their location was being used to, for example, influence them with ads or to infer their interests”.

He added that “the retention of users’ location data for longer than necessary aggravated this loss of control”.

Alongside the fine, the regulator said it had “ordered Google to bring its processing into compliance within six months”.