Regulatory Action Against Google

Google has been handed a hefty fine by Ireland’s Data Protection Commission (DPC) following an investigation into the company’s data privacy practices. The regulator, which serves as the primary authority for the company within the European Union due to Google's regional headquarters being located in Dublin, has ordered the tech giant to pay €403 million, equivalent to $463 million.

The enforcement action comes after the regulator started investigating the location data handling in 2020. This inquiry was prompted by formal complaints submitted by various consumer rights organizations regarding how the company managed sensitive user information.

Scope of the Privacy Inquiry

The investigation focused on Google’s processing of location data between May 2018 and February 2020. Regulators examined three specific features: Web & App Activity, which monitors user interaction across various platforms; Location History, an opt-in timeline feature; and Location Accuracy, a tool designed to enhance positioning on Android devices beyond standard GPS capabilities.

According to the DPC, Google failed to meet the 'lawfulness, fairness and transparency' requirements mandated by the General Data Protection Regulation (GDPR). The regulator determined that the company did not provide sufficient transparency for these three features and violated specific rules governing the retention of location data.

Company Response and Compliance

In a statement provided to the Associated Press, Google defended its current operations, noting that the issues cited relate to older policies. The company emphasized that it has undergone significant changes since 2019 to improve user controls.

The company stated: "This case centers around historical policies that have since been updated. From 2019 onwards, we've significantly evolved our practices and launched robust tools that make managing location data simple." As part of the ruling, the regulator has granted Google a six-month window to ensure all location data processing is brought into full alignment with GDPR standards.

A Pattern of EU Scrutiny

This financial penalty is the latest in a series of legal challenges for the company within the European bloc. The firm previously faced a significant setback when it lost its final appeal over a landmark antitrust case involving its Android mobile operating system.

Earlier this summer, the company faced further regulatory pressure when the European Commission fined Google $1 billion in July regarding its search practices. These incidents reflect the ongoing tension between regulators and the firm as the DPC continues to monitor other statutory inquiries currently at an advanced stage.

Sources

• EngadgetGoogle fined $463 million for breaching EU location data rules