Overview
- The Irish Data Protection Commission fined Google €403 million after finding the company processed Android location data without clear, informed user consent.
- The decision stems from complaints first filed in 2018 and focuses on how Google presented controls for Web & App Activity, Location History and Location Accuracy.
- Regulators say Google’s settings and explanations were designed so users could not easily see how location data was used for advertising or to infer personal interests.
- Google has six months to bring its processing into line with the GDPR, and three other DPC cases against the company remain open and could lead to more penalties.
- Consumer groups hailed the ruling as a win for privacy but warned that large fines may not deter big tech, and the case adds to growing EU and U.S. scrutiny of commercial location‑data markets.