Ireland's Data Protection Commission has fined Google €403 million ($463M) for multiple GDPR violations related to processing users' location data without proper consent.
The penalty, issued by the DPC, marks another significant enforcement action against the tech giant over privacy practices. The fine addresses Google's handling of location information collected from Android devices and Chrome browsers, which the regulator determined violated EU data protection rules.
The DPC found that Google failed to obtain valid consent before processing location data for ad targeting and personalization purposes. Users were not adequately informed about how their location information would be used, or the consent mechanisms presented did not meet GDPR requirements for freely given, specific, and informed consent.
The violation also extends to Google's transparency obligations. The company did not provide users with sufficient clarity regarding the scope, purpose, and duration of location data processing.
This fine is part of a broader pattern of enforcement against Google's data practices. The DPC has previously penalized Google for similar GDPR violations, including issues surrounding cookie consent and ad personalization. The accumulated fines reflect ongoing scrutiny of how the company collects and uses personal data across its services.
The €403 million penalty underscores regulators' commitment to enforcing GDPR provisions around location data, which is considered particularly sensitive under EU law. Location information can reveal detailed insights into users' movements, habits, and personal circumstances.
Google has not immediately commented on the fine. The company typically cooperates with data protection authorities on remediation measures following enforcement actions.
The decision may influence how other technology companies approach location data collection and consent mechanisms within the EU. It also reflects the DPC's active role as the primary regulator for major tech firms operating in Europe, given Google's Ireland-based regional headquarters.
The European Commission proposed rules Monday requiring data centers with 500+ kW capacity to publicly disclose their energy and water efficiency using a standardized EU labeling system.
AI infrastructure and power grid modernization are driving unexpected demand for copper, with data centers already consuming outsized amounts of the metal. US tariff policy could be the next major factor reshaping global copper markets.
California has settled its lawsuit challenging the Paramount-Warner Bros. Discovery merger, drawing criticism from consumer advocates. FTC Chair Lina Khan stated regulators had a "very strong" case that the deal violated antitrust law.