Google Fined Heavily by Ireland Over User Location Data

Irish regulators have fined Google over 400 million euros for its handling of user location data. The penalty came from the Irish Data Protection Commission (DPC), following accusations by seven European consumer protection organizations that Google tracked users' movements on their phones and used deceptive tactics to prompt "Location History" activation without their awareness. The investigation, initiated by 2018 research from the Norwegian Consumer Council, showed location data can reveal sensitive details like religious beliefs (via places of worship), political affiliations (attending demonstrations), health conditions (hospital visits), and sexual orientation (frequenting certain places). The DPC's six-year investigation concluded Google users might not have known their locations were used for ad targeting or to collect health and interest information. Graham Doyle, Deputy Commissioner, stated: "Location data brings both benefits and harms. It enhances online services but can also reveal inherently private information about an individual." Google, in a statement, said "this case relates to old, since-updated policies. Since 2019, we've significantly developed our practices and launched powerful tools simplifying location data management." While the European Consumer Organisation (BEUC) welcomed the decision, its Director General, Agustin Reyna, deemed "the time taken for this outcome disproportionate to the infringement's seriousness," warning "delays in enforcement can be as harmful as no enforcement at all." Finn Myrstad of the Norwegian Consumer Council added: "People must understand what they agree to without deception or manipulation." The investigation covered May 25, 2018, to February 4, 2020, examining "Web & App Activity," "Location History," and "Location Accuracy."