The Irish Data Protection Commission imposed a €403 million penalty on Google for violations of the EU's General Data Protection Regulation related to location tracking. The fine stems from an investigation launched six years ago following complaints by European consumer groups about the company's handling of users' location information. The inquiry examined data collected between May 25, 2018, and February 4, 2020, focusing on 'web and app activity,' 'location history,' and 'location accuracy.'

The investigation revealed that Google had allegedly manipulated users into enabling continuous location tracking through complex interface designs that obscured consent mechanisms. Researchers from Norway's consumer agency had previously demonstrated how such data could expose deeply personal details including religious affiliation, political activity, health conditions, and sexual orientation when combined with other information. The DPC concluded that Google lacked a valid legal basis for processing this data, particularly noting that users were often unaware their location would be used to target them with advertisements or build profiles about their interests.

Graham Doyle, a deputy commissioner at the Irish regulator, emphasized that location data constitutes highly sensitive personal information requiring lawful and transparent processing. While acknowledging its utility for online services, he noted it can also reveal inherently private aspects of individuals' lives. The regulator ordered Google to align its practices with GDPR requirements within six months and highlighted that retaining location data longer than necessary exacerbated privacy risks.

This penalty represents the fourth-largest fine issued by Ireland's DPC against major US technology firms, following previous sanctions against Meta, TikTok, and Instagram. The European Consumer Organisation welcomed the ruling but criticized the lengthy timeline, arguing that delayed enforcement diminishes its protective impact. Google maintains the case concerns historical policies that have since been revised, stating that from 2019 onward it implemented simplified tools for managing location data settings.