Ireland Fines Google €403 Million Over Location Data Mismanagement

The DPC identified systemic failures across three key account features: Location Accuracy, Web & App Activity, and Location History. Investigators found that Google stored this data far longer than necessary, effectively stripping users of their ability to manage their own digital footprint. By obscuring how this information influenced ad targeting, the company bypassed the core requirements of GDPR, which demands that data processing remain both fair and transparent.

Graham Doyle, deputy commissioner at the DPC, noted that users were largely left in the dark about how their physical movements were being leveraged to profile their interests. While the ruling addresses a significant breach of EEA data protection standards, consumer advocacy groups have criticized the Irish watchdog for a lethargic enforcement process that allowed these practices to persist for years after the initial grievances were filed.