Google has been fined €403 million (£345 million) by Ireland’s Data Protection Commission (DPC) over its handling of users’ location data.
The penalty followed a six-year investigation launched after complaints from several European consumer rights organisations, according to the BBC.
The DPC said its investigation found that Google processed location data in a manner that was not lawful, fair or transparent.
The investigation examined Google’s processing of location data through three features: Web & App Activity, Location History and Location Accuracy between May 25, 2018 and February 4, 2020.
The regulator said location data could reveal significant information about individuals, including details considered inherently private.
Graham Doyle, Deputy Commissioner at the DPC, said the General Data Protection Regulation (GDPR) required personal data to be processed lawfully, fairly and transparently.
He said Google’s practices breached the GDPR, which took effect on May 25, 2018, introducing strict data privacy and security requirements across the European Economic Area.
According to Doyle, Google’s practices could have left users unaware that their location data was being used for purposes such as influencing advertisements or inferring their interests.
He added that retaining location data for longer than necessary could further reduce users’ control over their personal information.
READ ALSO: 2027: Sam Amadi Reveals Only Path to Igbo Presidency
The DPC also ordered Google to bring its data processing practices into compliance with the GDPR within six months.
Reacting to the decision, Google said the case concerned historical policies that had since been updated.
“From 2019 onwards, we’ve significantly evolved our practices and launched robust tools that make managing location data simple,” the technology company said.
Google said it had introduced several measures to strengthen data protection, including automatic deletion controls that allow users to set their accounts to delete data on a rolling three-, 18- or 36-month basis.
The company also pointed to simplified advertising controls that allow users to disable personalised advertisements, as well as increased transparency around its location data practices and account settings.
