NewsPublished 21 Sep 2026

Google fined €403 million over location data privacy violations

Source Bleeping Computer

Description

Ireland's Data Protection Commission fined Google €403 million for multiple GDPR violations related to processing users' location data. The investigation focused on three Google features active from May 2018 through February 2020: Web and App Activity, Location History, and Location Accuracy. The DPC found that Google processed location data without meeting GDPR requirements, failed transparency obligations, and retained data longer than necessary. Google has since updated its policies and implemented improved data management controls. The DPC requires Google to comply within six months. No active exploit or vulnerability is reported.

Impact

The impact involves violations of GDPR privacy regulations, specifically regarding user consent, transparency, and data retention of location information. Users potentially lost control over their personal location data, which could have been used for targeted advertising or profiling without adequate awareness or consent. There is no indication of a technical security vulnerability or exploitation; the issue is regulatory non-compliance with privacy laws.

Defensive guidance

Google has updated its location data processing policies and implemented mechanisms for easier user control and automatic data deletion. The DPC requires Google to bring its practices into compliance within six months. Organizations and users should review and manage location data settings accordingly. No technical patch or security fix is applicable as this is a privacy compliance issue.

References

bleepingcomputer.com/news/security/google-fined-403-million-over-location-data-privacy-violations/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 21 Sep 2026, 15:46 UTC

References

Community reviews