Key Points
- Ireland’s Data Protection Commission fined Google €403 million ($463 million)
- The inquiry examined the legality and transparency of Google’s location data processing
- The investigation followed complaints from consumer organisations across the European Union
DUBLIN: Ireland’s Data Protection Commission (DPC) has fined Alphabet’s Google €403 million ($463 million) after an inquiry into the company’s user location data processing.
The regulator announced the penalty on Monday after an investigation that examined whether Google had a valid legal basis for processing location information and whether it met its transparency obligations under the European Union’s General Data Protection Regulation (GDPR).
The DPC began the statutory inquiry after receiving complaints from consumer organisations across the European Union concerning the legality and transparency of Google’s location-data processing.
Google Ireland investigations
The investigation covered Google Ireland Limited, which serves as a major European operation for the US technology company.
The inquiry was conducted under the GDPR’s cooperation mechanism, which allows data-protection authorities in EU member states to coordinate investigations involving companies operating across multiple European countries.
The DPC prepared a draft decision in 2023 and submitted it to other European data-protection authorities for review under the GDPR process.
The €403 million penalty is equivalent to about $463 million at the exchange rate cited in the report.
The DPC is one of Europe’s major data-protection regulators because many large technology companies maintain their European headquarters or major operations in Ireland.
READ ALSO: EU Hits Google with $3.45 Billion Fine Over Adtech Abuses
The GDPR sets rules governing how organisations collect, process, store and use personal data belonging to people in the European Union and European Economic Area. Location information can provide details about where a person lives, works, travels and spends time, making its collection and processing a significant privacy issue.
The DPC said its enforcement decisions can be subject to appeals and that fines imposed by the regulator do not become payable until they are confirmed by an Irish court. If a company appeals, collection of the fine is suspended pending the appeal.
The latest penalty adds to the DPC’s enforcement record involving major technology companies. The regulator says more than €4 billion in fines have been imposed through its inquiries, although only about €20 million had been collected as of its latest published figures.
